') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); build(deps): bump the go-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1795 · fastly/cli · GitHub
Skip to content

build(deps): bump the go-dependencies group across 1 directory with 5 updates - #1795

Merged
rcaril merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-cd331b6f53
May 13, 2026
Merged

build(deps): bump the go-dependencies group across 1 directory with 5 updates#1795
rcaril merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-cd331b6f53

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 13, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 4 updates in the / directory: github.com/bodgit/sevenzip, github.com/minio/minlz, github.com/nwaples/rardecode/v2 and golang.org/x/net.

Updates github.com/bodgit/sevenzip from 1.6.1 to 1.6.2

Release notes

Sourced from github.com/bodgit/sevenzip's releases.

v1.6.2

1.6.2 (2026-04-28)

Bug Fixes

  • Add ARM64 filter support (#395) (8648ac7)
  • deps: update go4.org digest to a507140 (#422) (367448a)
  • deps: update module github.com/andybalholm/brotli to v1.2.1 (#425) (63d4609)
  • deps: update module github.com/klauspost/compress to v1.18.5 (#426) (c01c118)
  • deps: update module github.com/pierrec/lz4/v4 to v4.1.26 (#427) (189b20d)
  • deps: update module github.com/spf13/afero to v1.15.0 (#431) (960c916)
  • deps: update module golang.org/x/sync to v0.20.0 (#432) (aa1e391)
  • deps: update module golang.org/x/text to v0.36.0 (#433) (dbed104)
  • Handle streams with no files (#401) (fe03793)
  • Prevent panics discovered by fuzzing (#402) (740fcf9)
Changelog

Sourced from github.com/bodgit/sevenzip's changelog.

1.6.2 (2026-04-28)

Bug Fixes

  • Add ARM64 filter support (#395) (8648ac7)
  • deps: update go4.org digest to a507140 (#422) (367448a)
  • deps: update module github.com/andybalholm/brotli to v1.2.1 (#425) (63d4609)
  • deps: update module github.com/klauspost/compress to v1.18.5 (#426) (c01c118)
  • deps: update module github.com/pierrec/lz4/v4 to v4.1.26 (#427) (189b20d)
  • deps: update module github.com/spf13/afero to v1.15.0 (#431) (960c916)
  • deps: update module golang.org/x/sync to v0.20.0 (#432) (aa1e391)
  • deps: update module golang.org/x/text to v0.36.0 (#433) (dbed104)
  • Handle streams with no files (#401) (fe03793)
  • Prevent panics discovered by fuzzing (#402) (740fcf9)
Commits
  • d6c1f14 chore(main): release 1.6.2 (#420)
  • 740fcf9 fix: Prevent panics discovered by fuzzing (#402)
  • 10f0674 chore(deps): update github/codeql-action action to v4.35.2 (#439)
  • 7abcd56 chore(deps): update marocchino/sticky-pull-request-comment action to v3 (#436)
  • 00b55e9 chore(deps): update actions/upload-artifact action to v7 (#435)
  • 60169dd chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6 (#438)
  • 2625d26 chore(deps): update actions/checkout action to v6 (#434)
  • 8344328 chore(deps): update pre-commit hook commitizen-tools/commitizen to v4 (#437)
  • 849dc25 chore(deps): update pre-commit hook golangci/golangci-lint to v2.11.4 (#429)
  • 37a8e9d chore(deps): update pre-commit hook gitleaks/gitleaks to v8.30.1 (#428)
  • Additional commits viewable in compare view

Updates github.com/minio/minlz from 1.0.1 to 1.1.1

Release notes

Sourced from github.com/minio/minlz's releases.

v1.1.1

What's Changed

Full Changelog: minio/minlz@v1.1.0...v1.1.1

v1.1.0

What's Changed

Full Changelog: minio/minlz@V1.0.1...v1.1.0

Commits
  • 49a054a Re-enable level 1 repeats on amd64 (#37)
  • 5e4aa43 Bump the github-actions group with 2 updates (#36)
  • 4599c83 Bump the github-actions group with 3 updates (#34)
  • c63f0af Add block visualizer (#32)
  • 5a44d11 Add faster compression mode for speed extremely sensitive applications (#30)
  • de1ccac Bump the github-actions group with 3 updates (#33)
  • 845e64f perf: Add arm64 decompression assembly (#29)
  • 8430409 Add -follow to decompression (#27)
  • 49f019e Add nicer looking block debug print (#26)
  • 336ffce Bump the github-actions group with 2 updates (#28)
  • Additional commits viewable in compare view

Updates github.com/nwaples/rardecode/v2 from 2.2.0 to 2.2.2

Commits
  • 922d3b0 allow reading v5 unencrypted file headers with an incorrect file body encypti...
  • f501ac8 fix infinite loop in findSig
  • f7e277c reimplement io.WriterTo for Reader
  • See full diff in compare view

Updates go4.org from 0.0.0-20230225012048-214862532bf5 to 0.0.0-20260112195520-a5071408f32f

Commits

Updates golang.org/x/net from 0.53.0 to 0.54.0

Commits
  • b138e06 go.mod: update golang.org/x dependencies
  • 689f70a quic: fix wrong final size being used for RESET_STREAM frame
  • 208f306 http3: increase handshake timeout
  • 49810da http2: enable net/http wrapping when go >= 1.27
  • 5e11a5a quic: fix data race in streamForFrame
  • 8c63081 http2: use empty Transport rather than DefaultTransport in http2wrap
  • fc7b466 http2: add http2wrap test
  • 15c2cb1 http2: avoid overflowing 32-bit int when http2wrap enabled
  • 6465188 http2: add wrapped Server
  • 72f419a http2: add wrapped ClientConn
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency NameIgnore Conditions
golang.org/x/net[>= 0.38.a, < 0.39]

@dependabotdependabotBot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 13, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMay 13, 2026 17:22
@dependabot
dependabotBot requested a review from jedisct1May 13, 2026 17:22
@dependabotdependabotBot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 13, 2026
@rcaril

rcaril commented May 13, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
build(deps): bump the go-dependencies group across 1 directory with 5…
d30b816
… updates
Bumps the go-dependencies group with 4 updates in the / directory: [github.com/bodgit/sevenzip](https://github.com/bodgit/sevenzip), [github.com/minio/minlz](https://github.com/minio/minlz), [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) and [golang.org/x/net](https://github.com/golang/net).
Updates `github.com/bodgit/sevenzip` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/bodgit/sevenzip/releases)
- [Changelog](https://github.com/bodgit/sevenzip/blob/main/CHANGELOG.md)
- [Commits](bodgit/sevenzip@v1.6.1...v1.6.2)
Updates `github.com/minio/minlz` from 1.0.1 to 1.1.1
- [Release notes](https://github.com/minio/minlz/releases)
- [Commits](minio/minlz@V1.0.1...v1.1.1)
Updates `github.com/nwaples/rardecode/v2` from 2.2.0 to 2.2.2
- [Commits](nwaples/rardecode@v2.2.0...v2.2.2)
Updates `go4.org` from 0.0.0-20230225012048-214862532bf5 to 0.0.0-20260112195520-a5071408f32f
- [Commits](https://github.com/go4org/go4/commits)
Updates `golang.org/x/net` from 0.53.0 to 0.54.0
- [Commits](golang/net@v0.53.0...v0.54.0)
---
updated-dependencies:
- dependency-name: github.com/bodgit/sevenzip
dependency-version: 1.6.2
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: github.com/minio/minlz
dependency-version: 1.1.1
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/nwaples/rardecode/v2
dependency-version: 2.2.2
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: go4.org
dependency-version: 0.0.0-20260112195520-a5071408f32f
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: golang.org/x/net
dependency-version: 0.54.0
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title build(deps): bump the go-dependencies group with 5 updatesbuild(deps): bump the go-dependencies group across 1 directory with 5 updatesMay 13, 2026
@dependabot
dependabotBotforce-pushed the dependabot/go_modules/go-dependencies-cd331b6f53 branch from 10c44b1 to d30b816CompareMay 13, 2026 17:43
@rcaril
rcaril enabled auto-merge (squash) May 13, 2026 17:45
@rcaril
rcaril merged commit 8ec2b56 into mainMay 13, 2026
13 checks passed
@rcaril
rcaril deleted the dependabot/go_modules/go-dependencies-cd331b6f53 branch May 13, 2026 17:53
@BrewTestBotBrewTestBot mentioned this pull request Jun 10, 2026
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rcarilrcarilrcaril approved these changes
@jedisct1jedisct1Awaiting requested review from jedisct1jedisct1 is a code owner automatically assigned from fastly/developer-tools

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filegoPull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rcaril