Skip to content

build(deps): bump github.com/ebitengine/purego from 0.11.1 to 0.11.3 in the gomod group - #3

Merged
bketelsen merged 1 commit into
mainfrom
dependabot/go_modules/gomod-8f8fafbb3a
Nov 10, 2026
Merged

bketelsen merged 1 commit into
mainfrom
dependabot/go_modules/gomod-8f8fafbb3a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 1 update: github.com/ebitengine/purego.

Updates github.com/ebitengine/purego from 0.11.1 to 0.11.3

Release notes

Sourced from github.com/ebitengine/purego's releases.

v0.11.3

  • Fix crashes when calling C functions on Linux 386 caused by incorrect stack alignment, with or without Cgo enabled (#458).

v0.11.2

Fix a crash during CPU profiling on macOS, FreeBSD, and NetBSD caused by incorrect signal masking when creating threads (#553).

Commits
  • 3fc0c5f all: align the stack for C calls on linux/386 (#558)
  • 9eba627 .github/workflows: use a Bootlin GCC for linux/mips (#556)
  • 0fd9f62 internal/fakecgo: use per-OS values for pthread_sigmask how (#553)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 1 update: [github.com/ebitengine/purego](https://github.com/ebitengine/purego).


Updates `github.com/ebitengine/purego` from 0.11.1 to 0.11.3
- [Release notes](https://github.com/ebitengine/purego/releases)
- [Commits](ebitengine/purego@v0.11.1...v0.11.3)

---
updated-dependencies:
- dependency-name: github.com/ebitengine/purego
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 10, 2026
@github-actions github-actions Bot added level:L2 Read the diff risk:high Touches a path in .github/risk-paths.json (core ADR-0068) labels Nov 10, 2026

@frostyard-machines frostyard-machines left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review of head 948400c6f4bca99f03497663300a348cf183ebb1: no findings. Ready for the maintainer.

Risk paths. The PR matches go.mod and go.sum (L2, supply chain). The diff changes only the github.com/ebitengine/purego requirement, v0.11.1 to v0.11.3, and its 2 checksum lines. The direct requirements stay MyGo and purego only.

Why the bump is safe

  • v0.11.1...v0.11.3 has 3 commits. No change touches Dlopen, Dlsym, RegisterLibFunc or the dlfcn files. The kit uses these in appid_linux.go (g_set_prgname, g_set_application_name), and MyGo v0.8.3 uses them to load its native libraries.
  • v0.11.2 (ebitengine/purego#553): internal/fakecgo now uses per-OS values for the pthread_sigmask how argument. The Linux values (0, 1, 2) do not change. On darwin, FreeBSD and NetBSD the values are now correct (1, 2, 3). This fixes a crash during CPU profiling there. With CGO_ENABLED=0, fakecgo is the code path that the kit and its apps use, so darwin builds get the fix.
  • v0.11.3 (ebitengine/purego#558): stack alignment for C calls on linux/386 only (sys_386.s, trampolines_386.s). The kit does not build for 386 (CROSS_TARGETS), so this has no effect here.
  • MyGo v0.8.3 requires purego v0.11.1. Minimum version selection picks v0.11.3, a patch release in the same minor line, so MyGo sees no API change. Apps that import the kit inherit v0.11.3.
  • CI is green at this head: verify (with go mod tidy -diff, the import and module guards, the tests and the js/wasm tests) and all 7 cross-build jobs.

@frostyard-machines frostyard-machines added the ready-for-human Reviewed, CI green: ready for Brian to review and merge label Nov 10, 2026
@bketelsen
bketelsen merged commit 1a4b2e8 into main Nov 10, 2026
12 checks passed
@bketelsen
bketelsen deleted the dependabot/go_modules/gomod-8f8fafbb3a branch November 10, 2026 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code level:L2 Read the diff ready-for-human Reviewed, CI green: ready for Brian to review and merge risk:high Touches a path in .github/risk-paths.json (core ADR-0068)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants