build(deps): bump the golang group across 1 directory with 7 updates #93

dependabot · 2025-10-01T13:18:18Z

Bumps the golang group with 5 updates in the / directory:

Package	From	To
github.com/autobrr/autobrr	`1.63.1`	`1.67.0`
github.com/charlievieth/fastwalk	`1.0.12`	`1.0.14`
github.com/creativeprojects/go-selfupdate	`1.5.0`	`1.5.1`
github.com/expr-lang/expr	`1.17.5`	`1.17.6`
github.com/spf13/cobra	`1.9.1`	`1.10.1`

Updates github.com/autobrr/autobrr from 1.63.1 to 1.67.0

Release notes

Sourced from github.com/autobrr/autobrr's releases.

v1.67.0

Changelog

New Features

020be684dead4e3b6de842ad4133ea321efb8744: feat(actions): qBittorrent set download path (#2145) (@kinghrothgar)

88796ad079b761346ebdc5e0721feb8a4ffb034f: feat(filters): add on error handling for external filters to continue or reject (#2073) (@bytemerger)

ed52a5f37c9082fba90b12d6b61483944d0ed624: feat(filters): add per-filter notification support (#2124) (@s0up4200)

02b9799203178dc9ee5f2ec0f618280560b3fbf9: feat(indexers): add Rastastugan (#2202) (@luckylittle)

881eee52b2e01c70000be17570a26a8fc2f9bf9b: feat(lists): MDBList optionally include year (#2172) (@luckylittle)

Bug fixes

a8786c43bb22aab45c79ac1dad601747f117b638: fix(feeds): torznab calculate leechers (#2198) (@zze0s)

870383eb1d940a6207b072b39e76497bbe274174: fix(irc): Soju bouncer nick check (#2191) (@winterberryteastories)

6f5afe319a723e8e52b6d8c10edf4d73f2d5f5ff: fix(lists): handle orphaned client references (#2190) (@s0up4200)

Other work

5595e68b65e393840a994d22fd04aa93483e083b: build(deps): bump Go to 1.25 (#2182) (@s0up4200)

facde866b73b2c8c401c8c91f022a5c743cf00e2: build(deps): bump the npm group across 1 directory with 19 updates (#2177) (@dependabot[bot])

188525bcd9cd954bfb3d1c214fbb8d06c2abb101: docs: update Discord invite links (#2200) (@zze0s)

Full Changelog: autobrr/autobrr@v1.66.1...v1.67.0

Docker images

docker pull ghcr.io/autobrr/autobrr:v1.67.0

What to do next?

Read the documentation

Join our Discord server

v1.66.1

Changelog

Bug fixes

c87926645594c4bb1e31893d103f02b43428b939: fix(downloadclient): Test sends keys as redacted if saved (#2184) (@zze0s)

ac36e4154bb1496ed7f01dee6eca01c90da68820: fix(indexers): Test API sends key as redacted if saved (#2183) (@zze0s)

7b03158fb677d97b93c32989288b34432163c826: fix(jobs): tmp cleanup user check (#2186) (@zze0s)

e64b82b2b9d371c2801c428a3df07137792935d2: fix(sessions): database store initialization (#2185) (@zze0s)

Full Changelog: autobrr/autobrr@v1.66.0...v1.66.1

Docker images

docker pull ghcr.io/autobrr/autobrr:v1.66.1

What to do next?

Read the documentation

Join our Discord server

v1.66.0

Changelog

New Features

... (truncated)

Commits

02b9799 feat(indexers): add Rastastugan (#2202)
188525b docs: update Discord invite links (#2200)
870383e fix(irc): Soju bouncer nick check (#2191)
a8786c4 fix(feeds): torznab calculate leechers (#2198)
facde86 build(deps): bump the npm group across 1 directory with 19 updates (#2177)
6f5afe3 fix(lists): handle orphaned client references (#2190)
ed52a5f feat(filters): add per-filter notification support (#2124)
88796ad feat(filters): add on error handling for external filters to continue or reje...
881eee5 feat(lists): MDBList optionally include year (#2172)
020be68 feat(actions): qBittorrent set download path (#2145)
Additional commits viewable in compare view

Updates github.com/autobrr/go-qbittorrent from 1.14.0 to 1.15.0-rc1

Release notes

Sourced from github.com/autobrr/go-qbittorrent's releases.

v1.15.0-rc1

What's Changed

chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 in the golang group by @dependabot[bot] in autobrr/go-qbittorrent#69

chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 in the golang group by @dependabot[bot] in autobrr/go-qbittorrent#70

chore(deps): bump actions/checkout from 4 to 5 in the github group by @dependabot[bot] in autobrr/go-qbittorrent#73

feat(methods): AddTorrent set download path by @kinghrothgar in autobrr/go-qbittorrent#72

feat(client): Return HTTP client by @KyleSanderson in autobrr/go-qbittorrent#74

fix(http): read and release resources by @KyleSanderson in autobrr/go-qbittorrent#75

feat(methods): implement sync manager for maindata by @KyleSanderson in autobrr/go-qbittorrent#71

build(ci): use Go version from file by @zze0s in autobrr/go-qbittorrent#79

New Contributors

@kinghrothgar made their first contribution in autobrr/go-qbittorrent#72

Full Changelog: autobrr/go-qbittorrent@v1.14.0...v1.15.0-rc1

Commits

e6c2a42 build(ci): use Go version from file (#79)
7fe7162 feat(methods): implement sync manager for maindata (#71)
9935570 fix(http): read and release resources (#75)
0626a47 feat(client): Return HTTP client (#74)
ae79b28 feat(methods): AddTorrent set download path (#72)
5b7c603 chore(deps): bump actions/checkout from 4 to 5 in the github group (#73)
bd681a6 chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 in the golang group ...
40fe388 chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 in the golang group ...
See full diff in compare view

Updates github.com/charlievieth/fastwalk from 1.0.12 to 1.0.14

Release notes

Sourced from github.com/charlievieth/fastwalk's releases.

v1.0.14 Fix readInt tests on s390x (for real this time)

v1.0.14

internal/dirent: fix tests on s390x: charlievieth/fastwalk#65

This release actually fixes the internal/dirent/readInt tests on s390x. Release v1.0.13 was meant to fix the tests but introduced a new test failure (which I didn't catch due to not having access to a s390x box).

NB: The only change here is the test.

Commits

d0efdb6 build(deps): bump actions/checkout from 4 to 5 (#62)
fbaa851 build(deps): bump actions/setup-go from 5 to 6 (#64)
52f664c internal/dirent: fix tests on s390x (#65)
c9ad02f internal/dirent: use binary.NativeEndian for parsing ints (#63)
9a3941f Skip TestFastWalk_ErrPermission as root user
See full diff in compare view

Updates github.com/creativeprojects/go-selfupdate from 1.5.0 to 1.5.1

Commits

fbb2732 update packages (fix for CVE-2025-58058)
e969587 Support an optional 'v' in semver present in the binary archive (#47)
See full diff in compare view

Updates github.com/expr-lang/expr from 1.17.5 to 1.17.6

Release notes

Sourced from github.com/expr-lang/expr's releases.

v1.17.6

What's Changed

Improve parser and lexer by @diegommm in expr-lang/expr#811

Ignoring fields with struct tag expr:"-" and make "in" return false for unexported fields by @diegommm in expr-lang/expr#806

Fix runtime error not allowing to slice unaddressable array type by @diegommm in expr-lang/expr#803

Fix *vm.VM memory leak by @diegommm in expr-lang/expr#813

Commits

87df783 Update README.md (#815)
1128642 fix VM not clearing memory references when reused (#813)
f1c65fa Fix runtime error not allowing to slice unaddressable array type (#803)
85d0be8 Ignoring fields with struct tag expr:"-" and make "in" return false for unexp...
98b0990 Improve parser and lexer (#811)
See full diff in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the golang group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/autobrr/autobrr](https://github.com/autobrr/autobrr) | `1.63.1` | `1.67.0` | | [github.com/charlievieth/fastwalk](https://github.com/charlievieth/fastwalk) | `1.0.12` | `1.0.14` | | [github.com/creativeprojects/go-selfupdate](https://github.com/creativeprojects/go-selfupdate) | `1.5.0` | `1.5.1` | | [github.com/expr-lang/expr](https://github.com/expr-lang/expr) | `1.17.5` | `1.17.6` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | Updates `github.com/autobrr/autobrr` from 1.63.1 to 1.67.0 - [Release notes](https://github.com/autobrr/autobrr/releases) - [Changelog](https://github.com/autobrr/autobrr/blob/develop/.goreleaser.yml) - [Commits](autobrr/autobrr@v1.63.1...v1.67.0) Updates `github.com/autobrr/go-qbittorrent` from 1.14.0 to 1.15.0-rc1 - [Release notes](https://github.com/autobrr/go-qbittorrent/releases) - [Commits](autobrr/go-qbittorrent@v1.14.0...v1.15.0-rc1) Updates `github.com/charlievieth/fastwalk` from 1.0.12 to 1.0.14 - [Release notes](https://github.com/charlievieth/fastwalk/releases) - [Commits](charlievieth/fastwalk@v1.0.12...v1.0.14) Updates `github.com/creativeprojects/go-selfupdate` from 1.5.0 to 1.5.1 - [Changelog](https://github.com/creativeprojects/go-selfupdate/blob/main/release.go) - [Commits](creativeprojects/go-selfupdate@v1.5.0...v1.5.1) Updates `github.com/expr-lang/expr` from 1.17.5 to 1.17.6 - [Release notes](https://github.com/expr-lang/expr/releases) - [Commits](expr-lang/expr@v1.17.5...v1.17.6) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) --- updated-dependencies: - dependency-name: github.com/autobrr/autobrr dependency-version: 1.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/autobrr/go-qbittorrent dependency-version: 1.15.0-rc1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/charlievieth/fastwalk dependency-version: 1.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/creativeprojects/go-selfupdate dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/expr-lang/expr dependency-version: 1.17.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies go Pull requests that update Go code labels Oct 1, 2025

dependabot bot force-pushed the dependabot/go_modules/golang-c0e6bf7824 branch from 22eb0d6 to ec3116d Compare November 1, 2025 13:11

dependabot bot force-pushed the dependabot/go_modules/golang-c0e6bf7824 branch from ec3116d to d5b4021 Compare December 1, 2025 16:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): bump the golang group across 1 directory with 7 updates #93

build(deps): bump the golang group across 1 directory with 7 updates #93

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

build(deps): bump the golang group across 1 directory with 7 updates #93

Are you sure you want to change the base?

build(deps): bump the golang group across 1 directory with 7 updates #93

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.67.0

Changelog

New Features

Bug fixes

Other work

Docker images

What to do next?

v1.66.1

Changelog

Bug fixes

Docker images

What to do next?

v1.66.0

Changelog

New Features

v1.15.0-rc1

What's Changed

New Contributors

v1.0.14 Fix readInt tests on s390x (for real this time)

v1.17.6

What's Changed

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 1, 2025 •

edited

Loading