Skip to content

deps: bump the go-dependencies group with 2 updates - #697

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-51eb7f2acc
Sep 10, 2026
Merged

deps: bump the go-dependencies group with 2 updates#697
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-51eb7f2acc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 2 updates: golang.org/x/mod and golang.org/x/sys.

Updates golang.org/x/mod from 0.40.0 to 0.41.0

Commits
  • d0a27b2 modfile: fix Cleanup and DropTool documentation
  • d12008c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits
  • 613e257 cpu: add riscv64 hwprobe drift test
  • 6f7b10f unix: add MLOCK_ONFAULT constant
  • 663e7c8 cpu: add basic support for GOARCH=sparc64
  • de5f12f cpu: add ppc64le POWER10 detection
  • 80e8acf unix: run go fix
  • 1e3c182 unix: add IPMI interface
  • d429e20 unix: stop generating sparc termbits from the generic header
  • bd3bddf unix: add missing HWTSTAMP_* constants
  • e812f53 windows: add SO_SNDTIMEO constant for socket options
  • f6989c5 unix: align Ifreq so its union accessors cannot fault
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps golang.org/x/mod from 0.40.0 to 0.41.0 and golang.org/x/sys from 0.47.0 to 0.48.0. These are minor version updates with no expected behavior changes.

Written for commit 725be73. Summary will update on new commits.

Review in cubic

Bumps the go-dependencies group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/mod` from 0.40.0 to 0.41.0
- [Commits](golang/mod@v0.40.0...v0.41.0)

Updates `golang.org/x/sys` from 0.47.0 to 0.48.0
- [Commits](golang/sys@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 10, 2026
Copilot AI balanced review requested due to automatic review settings September 10, 2026 06:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 10, 2026
@github-actions github-actions Bot added the deps label Sep 10, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The dependency declarations and checksums are consistent, with no identified compatibility concerns.

Pull request overview

Updates two Go dependencies to their latest minor versions.

Changes:

  • Bumps golang.org/x/mod to v0.41.0.
  • Bumps golang.org/x/sys to v0.48.0.
  • Updates module checksums accordingly.

[!TIP]
If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

File summaries
File Description
go.mod Updates dependency versions.
go.sum Updates corresponding checksums.
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 0
  • Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@github-actions
github-actions Bot merged commit f9fc9b4 into main Sep 10, 2026
33 of 34 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-51eb7f2acc branch September 10, 2026 06:09
jeremy added a commit that referenced this pull request Sep 10, 2026
#697 changed go.sum this morning and the Nix vendorHash in nix/package.nix
stayed at the previous value, so `nix build` fails with a hash mismatch.
Main's own Test run did not show it: the Nix job only builds when a
flake-relevant path changes, and the merge commit that landed on main
touched none, so the job reported success with the build skipped. Any
branch that touches go.sum, flake.*, nix/ or test.yml now fails on it.

The hash is the one CI computed on two independent runs of the build.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file deps go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant