build(deps): bump the go-minor-patch group across 1 directory with 12 updates by dependabot[bot] · Pull Request #8 · Sulaiman-Dauda/gresbase

dependabot · 2026-07-27T09:36:44Z

Bumps the go-minor-patch group with 11 updates in the /backend directory:

Package	From	To
github.com/fatih/color	`1.18.0`	`1.19.0`
github.com/go-chi/chi/v5	`5.1.0`	`5.3.1`
github.com/go-chi/cors	`1.2.1`	`1.2.2`
github.com/go-chi/httprate	`0.14.1`	`0.16.0`
github.com/jackc/pgx/v5	`5.9.2`	`5.10.0`
github.com/minio/minio-go/v7	`7.0.76`	`7.2.1`
github.com/rs/zerolog	`1.34.0`	`1.35.1`
github.com/spf13/viper	`1.19.0`	`1.21.0`
github.com/tus/tusd/v2	`2.9.2`	`2.10.0`
golang.org/x/crypto	`0.52.0`	`0.54.0`
golang.org/x/image	`0.43.0`	`0.44.0`

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

Bump golang.org/x/sys from 0.25.0 to 0.28.0 by @dependabot[bot] in fatih/color#246

Fix for issue #230 set/unsetwriter symmetric wrt color support detection by @ataypamart in fatih/color#243

chore: go mod cleanup by @sashamelentyev in fatih/color#244

Bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot[bot] in fatih/color#249

Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot[bot] in fatih/color#248

Update CI and go deps by @fatih in fatih/color#254

Bump golang.org/x/sys from 0.31.0 to 0.37.0 by @dependabot[bot] in fatih/color#268

fix: include escape codes in byte counts from Fprint, Fprintf by @qualidafial in fatih/color#282

Bump golang.org/x/sys from 0.37.0 to 0.40.0 by @dependabot[bot] in fatih/color#277

fix: add nil check for os.Stdout to prevent panic on Windows services by @majiayu000 in fatih/color#275

Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by @dependabot[bot] in fatih/color#259

Bump actions/checkout from 4 to 6 by @dependabot[bot] in fatih/color#273

Optimize Color.Equals performance (O(n²) → O(n)) by @UnSubble in fatih/color#269

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in fatih/color#266

New Contributors

@ataypamart made their first contribution in fatih/color#243

@sashamelentyev made their first contribution in fatih/color#244

@qualidafial made their first contribution in fatih/color#282

@majiayu000 made their first contribution in fatih/color#275

@UnSubble made their first contribution in fatih/color#269

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits

ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
1205984 Bump actions/setup-go from 5 to 6
5715c20 Merge pull request #269 from UnSubble/main
2f6e200 Merge branch 'main' into main
f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
848e633 Merge branch 'main' into main
4c2cd34 Add tests
7f812f0 Bump actions/checkout from 4 to 6
b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.1.0 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

Honor Discard() in httpFancyWriter.ReadFrom by @DucMinhNe in go-chi/chi#1110

Tidy build directives by @JRaspass in go-chi/chi#1113

feat(middleware): add text/xml and application/xml to default compressible types by @VojtechVitek in go-chi/chi#1127

Fix defaultLogEntry.Panic not respecting NoColor setting by @doganarif in go-chi/chi#1050

middleware: document printPrettyStack and harden NoColor panic test by @VojtechVitek in go-chi/chi#1131

feat(mux): support http QUERY method ietf rfc10008 by @VojtechVitek in go-chi/chi#1132

ci: pin GitHub Actions to full commit SHAs by @XananasX7 in go-chi/chi#1116

New Contributors

@DucMinhNe made their first contribution in go-chi/chi#1110

@doganarif made their first contribution in go-chi/chi#1050

@XananasX7 made their first contribution in go-chi/chi#1116

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

v5.3.0

What's Changed

Use strings.ReplaceAll where applicable by @JRaspass in go-chi/chi#1046

Propagate inline middlewares across mounted subrouters by @LukasJenicek in go-chi/chi#1049

add go 1.26 to ci by @pkieltyka in go-chi/chi#1052

Remove last uses of io/ioutil by @JRaspass in go-chi/chi#1054

Simplify chi.walk with slices.Concat by @JRaspass in go-chi/chi#1053

Apply the stringscutprefix modernizer by @JRaspass in go-chi/chi#1051

Bump minimum Go to 1.23, always use request.Pattern by @JRaspass in go-chi/chi#1048

middleware: fix httpFancyWriter.ReadFrom double-counting bytes with Tee by @alliasgher in go-chi/chi#1085

Fix typo in Route doc comment by @gouwazi in go-chi/chi#1073

fix: set Request.Pattern from RoutePattern() by @leno23 in go-chi/chi#1097

feat: middleware.ClientIP, a replacement for middleware.RealIP by @VojtechVitek in go-chi/chi#967

New Contributors

@LukasJenicek made their first contribution in go-chi/chi#1049

@alliasgher made their first contribution in go-chi/chi#1085

@gouwazi made their first contribution in go-chi/chi#1073

@leno23 made their first contribution in go-chi/chi#1097

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

GHSA-9g5q-2w5x-hmxf — IP spoofing via XFF in RemoteAddr resolution (convto)

GHSA-rjr7-jggh-pgcp — RealIP allows IP spoofing via unvalidated XFF (rezmoss)

GHSA-3fxj-6jh8-hvhx — IP spoofing in middleware.RealIP (Saku0512, Critical / 9.3)

It also addresses issues outlined at:

go-chi/chi#708

https://adam-p.ca/blog/2022/03/x-forwarded-for/

go-chi/chi#711

go-chi/chi#453

go-chi/chi#908

... (truncated)

Commits

8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
3b50c7c Tidy build directives (#1113)
2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
3b17157 feat: middleware.ClientIP, a replacement for middleware.RealIP (#967)
818fdcf fix: set Request.Pattern from RoutePattern() (#1097)
f975af0 Fix typo in Route doc comment (#1073)
Additional commits viewable in compare view

Updates github.com/go-chi/cors from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/go-chi/cors's releases.

v1.2.2

What's Changed

Update README with install by @Uyutaka in go-chi/cors#22

Fix broken credits link by @lordidiot in go-chi/cors#25

fix test_default error message #28 by @ablankz in go-chi/cors#29

Update Go version in CI by @VojtechVitek in go-chi/cors#32

Fix Origin header check by @c2h5oh in go-chi/cors#38

New Contributors

@Uyutaka made their first contribution in go-chi/cors#22

@lordidiot made their first contribution in go-chi/cors#25

@ablankz made their first contribution in go-chi/cors#29

@VojtechVitek made their first contribution in go-chi/cors#32

@c2h5oh made their first contribution in go-chi/cors#38

Full Changelog: go-chi/cors@v1.2.1...v1.2.2

Commits

3a53812 Fix Origin header check (#38)
f8fbaee Update Go version in CI (#32)
b41f767 fix test_default error message #28 (#29)
76ca797 Fix broken link (#25)
9aca617 Update README with install (#22)
See full diff in compare view

Updates github.com/go-chi/httprate from 0.14.1 to 0.16.0

Release notes

Sourced from github.com/go-chi/httprate's releases.

v0.16.0

What's Changed

perf: replace fmt with strconv to reduce allocations by @EricGusmao in go-chi/httprate#55

local counter: align windows to reset at sub-millisecond counter start by @VojtechVitek in go-chi/httprate#58

test: drop golang.org/x/sync dependency (errgroup → sync.WaitGroup) by @VojtechVitek in go-chi/httprate#59

perf: use zero-alloc xxh3.HashString on the local counter hot path by @VojtechVitek in go-chi/httprate#60

Deprecate spoofable RealIP rate-limiting; add LimitBy + KeyFromContext and modernize the key API by @VojtechVitek in go-chi/httprate#61

New Contributors

@EricGusmao made their first contribution in go-chi/httprate#55

Full Changelog: go-chi/httprate@v0.15.0...v0.16.0

v0.15.0

upgrade to xxhash v3

Commits

741b4a5 Deprecate spoofable RealIP rate-limiting; add LimitBy + KeyFromContext and mo...
81255de perf: use zero-alloc xxh3.HashString on the local counter hot path (#60)
0c2093a test: replace golang.org/x/sync/errgroup with sync.WaitGroup (#59)
89e5cca local counter: align windows to reset at sub-millisecond counter start (#58)
be2ba84 replace fmt with strconv to reduce allocations (#55)
c0b6272 upgrade to xxh3 hashing pkg (#54)
9d627fb Update README.md: add missing 'time' import in code example (#49)
24ebb38 Try to fix Github action access issue (#51)
See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)

Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)

Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)

Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)

pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)

Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)

Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)

Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)

Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)

Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)

Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)

Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

Fix scanning "char" (OID 18) into *string in binary format (luongs3)

Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)

Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)

Fix data race when context is cancelled during connect

Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)

pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)

pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)

pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check

Add missing error check of rows.Err to load types (Jen Altavilla)

Commits

7293fb1 Update changelog for v5.10.0
1ade285 pgconn: document secure connection configuration
b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
b28e65b pgtype: bound array element count against remaining message bytes
cd1f389 pgtype: bound array binary decode element length against remaining bytes
ff27b5b pgtype: bound hstore binary decode against malicious server input
a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
44f6173 pgconn: cap server-supplied SCRAM iteration count
1a976f7 pgconn: add require_auth to restrict accepted server auth methods
Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.76 to 7.2.1

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.2.0

What's Changed

Use go tool for ci-lint check by @klauspost in minio/minio-go#2229

Rename github.com/go-ini/ini to gopkg.in/ini.v1 by @ramondeklein in minio/minio-go#2232

Add RDMA / NVIDIA GPU Direct Storage support by @harshavardhana in minio/minio-go#2233

Full Changelog: minio/minio-go@v7.1.0...v7.2.0

Release v7.1.0

What's Changed

GetObjectAttributes: Add missing checksum & type by @klauspost in minio/minio-go#2217

support x-minio-source-time header for getobject / statObject by @jiuker in minio/minio-go#2219

Add new AWS checksums by @klauspost in minio/minio-go#2221

Full Changelog: minio/minio-go@v7.0.100...v7.1.0

v7.0.98

What's Changed

Only marshal lifecycle rule Filter XML when not empty by @amigan in minio/minio-go#2177

Add post-call checks on AppendObject by @klauspost in minio/minio-go#2178

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @emike922 in minio/minio-go#2182

Support GCS bulk delete with serialized single DELETE requests by @harshavardhana in minio/minio-go#2185

Add automatic checksum test by @klauspost in minio/minio-go#2184

Fix wrong checksum type field name by @klauspost in minio/minio-go#2188

Upgrade dependencies, remove toolchain by @klauspost in minio/minio-go#2189

Increase max object size to ~48.83TiB (5GiB * 10000 parts) by @harshavardhana in minio/minio-go#2190

Add generic Set[T comparable] implementation to pkg/set by @harshavardhana in minio/minio-go#2192

Refactor: Use pkg/set types for internal set collections by @harshavardhana in minio/minio-go#2193

New Contributors

@amigan made their first contribution in minio/minio-go#2177

@emike922 made their first contribution in minio/minio-go#2182

Full Changelog: minio/minio-go@v7.0.97...v7.0.98

Bugfix Release

What's Changed

test: add test for PresignedPostPolicy with empty fileName by @jiuker in minio/minio-go#2119

fix: prefix should use stringLike when new a bucketPolicy (2) by @mannreis in minio/minio-go#2124

update all deps by @harshavardhana in minio/minio-go#2125

set checksum headers requested properly by @harshavardhana in minio/minio-go#2130

fix: missing append() API behavior by @harshavardhana in minio/minio-go#2131

extend more missing headers for PartUploads by @harshavardhana in minio/minio-go#2132

fix: explicitly use UTC for expiration field when marshaling PostPolicy by @qwwqe in minio/minio-go#2135

fix: DurationSeconds is a QueryValues not a Form data (#2128) by @vlaborie in minio/minio-go#2129

make sure to avoid closing the input reader by @harshavardhana in minio/minio-go#2137

New Contributors

... (truncated)

Commits

7e34713 feat: support in mc inventory for custom run schedule (#2244)
016d0fd feat: stream GetObjectAnnotation payload via io.ReadCloser (#2243)
6c51637 feat: stream PutObjectAnnotation payload via io.ReadSeeker (#2242)
07c682a feat: add object annotation client APIs (#2241)
53b504a fix: caching defer bug (#2237)
291e83f add new aws region ap-southeast-6 (#2234)
33792ec Add RDMA / NVIDIA GPU Direct Storage support (#2233)
6bb13f7 Rename github.com/go-ini/ini to gopkg.in/ini.v1 (#2232)
d6341dc Use go tool for ci-lint check (#2229)
f29e568 Add new AWS checksums (#2221)
Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.34.0 to 1.35.1

Commits

116c806 event: restore Err() logging when ErrorStackMarshaler returns nil (#763)
1396655 Bump CI Go matrix minimum from 1.21 to 1.23
4b65a2f Bump actions/cache from 4 to 5 (#741)
b835796 Bump actions/setup-go from 5 to 6 (#742)
134caf8 Added sanitization of journald keys (#751)
e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
d64c9a7 Add slog.Handler implementation for zerolog (#755)
a0d61dc fix: return dict to Event pool (#749)
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in spf13/cobra#2327

fix: actions/setup-go v6 by @jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in spf13/cobra#2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in spf13/cobra#2328

refactor: change minUsagePadding from var to const by @ssam18 in spf13/cobra#2325

🤗 New Contributors

@rvergis made their first contribution in spf13/cobra#2316

@htoyoda18 made their first contribution in spf13/cobra#2328

@ssam18 made their first contribution in spf13/cobra#2325

@dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

... (truncated)

Commits

88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
346d408 fix: actions/setup-go v6 (#2337)
fc81d20 refactor: change minUsagePadding from var to const (#2325)
117698a refactor: replace several vars with consts (#2328)
e2dd29d Add documentation for repeated flags functionality (#2316)
0629892 Fix linter (#2327)
7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.19.0 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Add support for flags pflag.BoolSlice, pflag.UintSlice and pflag.Float64Slice by @nmvalera in spf13/viper#2015

feat: use maintained yaml library by @sagikazarmark in spf13/viper#2040

Bug Fixes 🐛

fix(config): get config type from v.configType or config file ext by @GuillaumeBAECHLER in spf13/viper#2003

fix: config type check when loading any config by @sagikazarmark in spf13/viper#2007

Dependency Updates ⬆️

Update dependencies by @sagikazarmark in spf13/viper#1993

build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by @dependabot[bot] in spf13/viper#2017

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in spf13/viper#2013

build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to 0.9.0 by @dependabot[bot] in spf13/viper#2008

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote by @dependabot[bot] in spf13/viper#2016

build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by @dependabot[bot] in spf13/viper#2020

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in spf13/viper#2028

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in spf13/viper#2035

build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in spf13/viper#2036

build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot[bot] in spf13/viper#2012

build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in spf13/viper#2052

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /remote by @dependabot[bot] in spf13/viper#2048

build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by @dependabot[bot] in spf13/viper#2056

chore: update dependencies by @sagikazarmark in spf13/viper#2057

Other Changes

Update update guide with mapstructure package replacement. by @aldas in spf13/viper#2004

refactor: use the built-in max/min to simplify the code by @yingshanghuangqiao in spf13/viper#2029

New Contributors

@GuillaumeBAECHLER made their first contribution in spf13/viper#2003

@aldas made their first contribution in spf13/viper#2004

@nmvalera made their first contribution in spf13/viper#2015

@yingshanghuangqiao made their first contribution in spf13/viper#2029

@ccoVeille made their first contribution in spf13/viper#2046

@spacez320 made their first contribution in spf13/viper#2050

Full Changelog: spf13/viper@v1.20.0...v1.21.0

v1.20.1

What's Changed

Bug Fixes 🐛

Backport config type fixes to 1.20.x by @sagikazarmark in spf13/viper#2005

Full Changelog: spf13/viper@v1.20.0...v1.20.1

v1.20.0

... (truncated)

Commits

394040c ci: build on go 1.25
812f548 chore: update dependencies
d5271ef ci: update stale workflow
dff303b feat: add a stale issue scheduled action
1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
acd05e1 fix: linting issues
ae5a8e2 ci: upgrade golangci-lint
Additional commits viewable in compare view

Updates github.com/tus/tusd/v2 from 2.9.2 to 2.10.0

Release notes

Sourced from github.com/tus/tusd/v2's releases.

v2.10.0

What's Changed

hooks: Add option to disable TLS verification by @nerg4l in tus/tusd#1359

azurestore: Fix InvalidHeaderValue error due to empty sentinel block by @DotaPie in tus/tusd#1379

cli: Fix issue preventing encrypted connections via HTTP/2 in tus/tusd@90f7b8e

New Contributors

@nerg4l made their first contribution in tus/tusd#1359

@DotaPie made their first contribution in tus/tusd#1379

Full Changelog: tus/tusd@v2.9.2...v2.10.0

Commits

a4296d4 azurestore: Fix InvalidHeaderValue error due to empty sentinel block (#1379)
8314bc2 Pin third-party GitHub Actions to SHAs (#1378)
4efc5b5 build(deps): bump golang in the docker group (#1375)
46fc4c9 build(deps): bump the gha group with 3 updates (#1376)
401370f build(deps): bump the go group with 8 updates (#1377)
347b850 hooks: Add option to disable TLS verification (#1359)
27bba71 docs: Fix typos
06ab853 cmd: Error out if H2C and TLS are requested together
b012010 docs: Update documentation covering HTTP/2 options
afefec0 cmd: Use net/http's H2C capabilities
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
Additional commits viewable in compare view

Updates golang.org/x/image from 0.43.0 to 0.44.0

Commits

891abcb go.mod: update golang.org/x dependencies
f50490d font: document (lack of) security hardening in font packages
7a0cfda webp: check for VP8L dimension mismatch before allocation
4339315 tiff: consistently skip horizontal padding in tiled images
See full diff in compare view

… updates Bumps the go-minor-patch group with 11 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.1.0` | `5.3.1` | | [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` | | [github.com/go-chi/httprate](https://github.com/go-chi/httprate) | `0.14.1` | `0.16.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.76` | `7.2.1` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.21.0` | | [github.com/tus/tusd/v2](https://github.com/tus/tusd) | `2.9.2` | `2.10.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.54.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.43.0` | `0.44.0` | Updates `github.com/fatih/color` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/fatih/color/releases) - [Commits](fatih/color@v1.18.0...v1.19.0) Updates `github.com/go-chi/chi/v5` from 5.1.0 to 5.3.1 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.1.0...v5.3.1) Updates `github.com/go-chi/cors` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/go-chi/cors/releases) - [Commits](go-chi/cors@v1.2.1...v1.2.2) Updates `github.com/go-chi/httprate` from 0.14.1 to 0.16.0 - [Release notes](https://github.com/go-chi/httprate/releases) - [Commits](go-chi/httprate@v0.14.1...v0.16.0) Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.9.2...v5.10.0) Updates `github.com/minio/minio-go/v7` from 7.0.76 to 7.2.1 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.0.76...v7.2.1) Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1 - [Commits](rs/zerolog@v1.34.0...v1.35.1) Updates `github.com/spf13/cobra` from 1.8.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.10.2) Updates `github.com/spf13/viper` from 1.19.0 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.19.0...v1.21.0) Updates `github.com/tus/tusd/v2` from 2.9.2 to 2.10.0 - [Release notes](https://github.com/tus/tusd/releases) - [Commits](tus/tusd@v2.9.2...v2.10.0) Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0 - [Commits](golang/crypto@v0.52.0...v0.54.0) Updates `golang.org/x/image` from 0.43.0 to 0.44.0 - [Commits](golang/image@v0.43.0...v0.44.0) --- updated-dependencies: - dependency-name: github.com/fatih/color dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/go-chi/cors dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/go-chi/httprate dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/rs/zerolog dependency-version: 1.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/tus/tusd/v2 dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/image dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Dependency updates label Jul 27, 2026

dependabot Bot changed the title ~~build(deps): bump the go-minor-patch group in /backend with 12 updates~~ build(deps): bump the go-minor-patch group across 1 directory with 12 updates Jul 27, 2026

dependabot Bot force-pushed the dependabot/go_modules/backend/go-minor-patch-ac2b76f322 branch from d75eef7 to 1b2c531 Compare July 27, 2026 10:03

Navigation Menu

build(deps): bump the go-minor-patch group across 1 directory with 12 updates - #8

build(deps): bump the go-minor-patch group across 1 directory with 12 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/backend/go-minor-patch-ac2b76f322

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.19.0

What's Changed

New Contributors

v5.3.1

What's Changed

New Contributors

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

v1.2.2

What's Changed

New Contributors

v0.16.0

What's Changed

New Contributors

v0.15.0

5.10.0 (June 3, 2026)

Features

Security Hardening

Fixes

v7.2.0

What's Changed

Release v7.1.0

What's Changed

v7.0.98

What's Changed

New Contributors

Bugfix Release

What's Changed

New Contributors

v1.10.2

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

v1.20.1

What's Changed

Bug Fixes 🐛

v1.20.0

v2.10.0

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading