') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); build(deps): bump the go-dependencies group with 5 updates by dependabot[bot] · Pull Request #1847 · fastly/cli · GitHub
Skip to content

build(deps): bump the go-dependencies group with 5 updates - #1847

Merged
philippschulte merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-15727009ce
Jul 15, 2026
Merged

build(deps): bump the go-dependencies group with 5 updates#1847
philippschulte merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-15727009ce

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 5 updates:

PackageFromTo
golang.org/x/crypto0.53.00.54.0
github.com/bodgit/sevenzip1.6.41.6.5
github.com/minio/minlz1.1.11.2.0
github.com/coreos/go-oidc/v33.19.03.20.0
golang.org/x/net0.56.00.57.0

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • See full diff in compare view

Updates github.com/bodgit/sevenzip from 1.6.4 to 1.6.5

Release notes

Sourced from github.com/bodgit/sevenzip's releases.

v1.6.5

1.6.5 (2026-07-10)

Bug Fixes

  • deps: update module github.com/andybalholm/brotli to v1.2.2 (#473) (0ba424c)
  • deps: update module github.com/klauspost/compress to v1.19.0 (#474) (9dddc71)
  • deps: update module github.com/pierrec/lz4/v4 to v4.1.27 (#462) (f4764c5)
  • deps: update module github.com/stangelandcl/ppmd to v0.1.1 (#459) (9ab6e10)
  • deps: update module golang.org/x/sync to v0.22.0 (#466) (d9d7777)
  • deps: update module golang.org/x/text to v0.40.0 (#467) (4271f9b)
  • return EOF when buffer is empty (#476) (b9f4edb)
Changelog

Sourced from github.com/bodgit/sevenzip's changelog.

1.6.5 (2026-07-10)

Bug Fixes

  • deps: update module github.com/andybalholm/brotli to v1.2.2 (#473) (0ba424c)
  • deps: update module github.com/klauspost/compress to v1.19.0 (#474) (9dddc71)
  • deps: update module github.com/pierrec/lz4/v4 to v4.1.27 (#462) (f4764c5)
  • deps: update module github.com/stangelandcl/ppmd to v0.1.1 (#459) (9ab6e10)
  • deps: update module golang.org/x/sync to v0.22.0 (#466) (d9d7777)
  • deps: update module golang.org/x/text to v0.40.0 (#467) (4271f9b)
  • return EOF when buffer is empty (#476) (b9f4edb)
Commits
  • dcfc72a chore(main): release 1.6.5 (#460)
  • 9dddc71 fix(deps): update module github.com/klauspost/compress to v1.19.0 (#474)
  • 0ba424c fix(deps): update module github.com/andybalholm/brotli to v1.2.2 (#473)
  • 4271f9b fix(deps): update module golang.org/x/text to v0.40.0 (#467)
  • d9d7777 fix(deps): update module golang.org/x/sync to v0.22.0 (#466)
  • 7f22666 chore(deps): update actions/checkout action to v7 (#468)
  • b137c31 chore(deps): update marocchino/sticky-pull-request-comment action to v3.0.5 (...
  • db3d12f chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.16.4 (#...
  • d2efd1c chore(deps): update github/codeql-action action to v4.37.0 (#465)
  • b9f4edb fix: return EOF when buffer is empty (#476)
  • Additional commits viewable in compare view

Updates github.com/minio/minlz from 1.1.1 to 1.2.0

Release notes

Sourced from github.com/minio/minlz's releases.

v1.2.0

feat: Search compressed data without decompression

Compression saves space, but it usually makes your data opaque: to find anything you first have to decompress the whole thing. MinLZ changes that. A MinLZ stream can carry a small per-block search index that lets mz search find a byte sequence while skipping every block that provably can't contain it — those blocks are never decompressed, and (with a sidecar) never even read from disk.

The result: you keep your data compressed and searchable.

One number to set the scene: finding a specific string in a 10 GB CockroachDB log (compressed to 578 MB) takes 0.14 s with mz search, reading about 133 MB. Decompressing that log and piping it to grep — the usual way to search compressed data — takes ~5 s and reads the whole file. zstd -dc | grep takes ~5 s, lz4 -dc | grep ~10 s. Scanning the raw 10 GB with rg takes ~8 s.

The search index is stored as skippable chunks: older MinLZ readers ignore them and the compressed payload is byte-for-byte unchanged, so adding search is always backward-compatible.

Search indexes can be built while compressing or after the fact as sidecar streams, allowing them to be used separately from the compressed data.

How it works (in 30 seconds)

Every block gets a tiny bloom-filter table: the byte-windows in the block are hashed and their bits set. To search, mz search hashes the same-length windows of your pattern and checks each block's table:

  • any window bit missing → the pattern is definitely not in that block → skip it (no decode);
  • all bits present → the block might match → decode and scan it.

Longer/rarer patterns produce more independent window checks, so blocks that don't contain them are rejected with near-certainty. Tables can live inline in the .mz, or in a sidecar .mzs file you build afterwards — handy for data you can't or don't want to re-compress.

This is why it matches with compression. Compressible data is very likely to produce search indexes that are also useful, meaning there is a reasonable reduction in the search table compared to the raw data.

For full details: SEARCH.md (usage & tuning) and SPEC_SEARCH.md (wire format).

When to use it — and when not

... (truncated)

Commits

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

Commits
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency NameIgnore Conditions
golang.org/x/net[>= 0.38.a, < 0.39]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-dependencies group with 5 updates
be70758
Bumps the go-dependencies group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.53.0` | `0.54.0` |
| [github.com/bodgit/sevenzip](https://github.com/bodgit/sevenzip) | `1.6.4` | `1.6.5` |
| [github.com/minio/minlz](https://github.com/minio/minlz) | `1.1.1` | `1.2.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.19.0` | `3.20.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.56.0` | `0.57.0` |
Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0
- [Commits](golang/crypto@v0.53.0...v0.54.0)
Updates `github.com/bodgit/sevenzip` from 1.6.4 to 1.6.5
- [Release notes](https://github.com/bodgit/sevenzip/releases)
- [Changelog](https://github.com/bodgit/sevenzip/blob/main/CHANGELOG.md)
- [Commits](bodgit/sevenzip@v1.6.4...v1.6.5)
Updates `github.com/minio/minlz` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/minio/minlz/releases)
- [Commits](minio/minlz@v1.1.1...v1.2.0)
Updates `github.com/coreos/go-oidc/v3` from 3.19.0 to 3.20.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.19.0...v3.20.0)
Updates `golang.org/x/net` from 0.56.0 to 0.57.0
- [Commits](golang/net@v0.56.0...v0.57.0)
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/bodgit/sevenzip
dependency-version: 1.6.5
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: go-dependencies
- dependency-name: github.com/minio/minlz
dependency-version: 1.2.0
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: github.com/coreos/go-oidc/v3
dependency-version: 3.20.0
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: go-dependencies
- dependency-name: golang.org/x/net
dependency-version: 0.57.0
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: go-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 15, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerJuly 15, 2026 16:43
@dependabotdependabotBot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 15, 2026
@philippschulte
philippschulte merged commit 25c1873 into mainJul 15, 2026
14 checks passed
@philippschulte
philippschulte deleted the dependabot/go_modules/go-dependencies-15727009ce branch July 15, 2026 16:59
@BrewTestBotBrewTestBot mentioned this pull request Aug 4, 2026
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@philippschultephilippschultephilippschulte approved these changes

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filegoPull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@philippschulte