Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#950

Merged
macrat merged 1 commit into
mainfrom
dependabot/go_modules/builder/minor-and-patch-17111c0165
Apr 26, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#950
macrat merged 1 commit into
mainfrom
dependabot/go_modules/builder/minor-and-patch-17111c0165

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the minor-and-patch group with 4 updates in the /builder directory: github.com/tdewolff/minify/v2, github.com/yuin/goldmark, golang.org/x/image and golang.org/x/net.

Updates github.com/tdewolff/minify/v2 from 2.24.8 to 2.24.13

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.24.13

v2.24.12

v2.24.11

v2.24.10

v2.24.9

Commits
  • 98dea98 Merge pull request #957 from tdewolff/dependabot/npm_and_yarn/bindings/js/kof...
  • d7ccf7e Merge pull request #955 from tdewolff/dependabot/npm_and_yarn/bindings/js/typ...
  • 34dd1d4 Merge pull request #951 from tdewolff/dependabot/npm_and_yarn/bindings/js/typ...
  • de50070 JS: fix rearrangement of const/let variables, fixes #958
  • 4ca5973 Merge branch 'master' of github.com:tdewolff/minify
  • 3f0aea9 Update
  • d6ad239 Bump koffi from 2.15.6 to 2.16.1 in /bindings/js
  • 810aa60 Bump typescript from 6.0.2 to 6.0.3 in /bindings/js
  • c41c3f3 Bump @​types/node from 25.5.2 to 25.6.0 in /bindings/js
  • 1cf23a6 Merge pull request #953 from tdewolff/dependabot/npm_and_yarn/bindings/js/kof...
  • Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.7.16 to 1.8.2

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.2

fix: setext headings positions

v1.8.1

fix: block positions

v1.8.0

  • feat: add position information to all nodes
    • add position information to all nodes, including inline nodes and link reference definition nodes.
    • Now link reference definition nodes are represented as a new node type.
    • Link and image nodes have a new field Reference which is a pointer to the reference link if this link is a reference link. This field is nil for non-reference links.

v1.7.17 release

Full Changelog: yuin/goldmark@v1.7.16...v1.7.17

Commits
  • 379bf24 fix: setext headings positions
  • e8f2337 fix: block positions
  • dfa1ae1 feat: add position information to all nodes
  • cb46bbc fix: prevent XSS by escaping dangerous URLs in links and images
  • d8b123c refactor: simplify codes
  • db34c99 Merge pull request #535 from Sebbito/master
  • 5a2a2bf Merge pull request #545 from maxatome/fix-table-panic
  • 9aca462 fix(table): if table cell attribute is a string, a panic occurs
  • ea86b36 Fix doc error in markdown.go
  • See full diff in compare view

Updates golang.org/x/image from 0.38.0 to 0.39.0

Commits
  • 3d5c9b6 go.mod: update golang.org/x dependencies
  • 854c274 font/sfnt: apply bounds checks before allocating read buffer
  • 96edba0 webp: reject VP8X headers with too-large canvases
  • See full diff in compare view

Updates golang.org/x/net from 0.49.0 to 0.53.0

Commits
  • a8d1fc1 go.mod: update golang.org/x dependencies
  • 056ac74 quic: avoid depending on golang.org/x/sys/unix
  • c85f611 http3: add http3 package for testing in std
  • 805fc81 http2: add transport API tests
  • e63b894 http2: support testing via net/http.Transport.RoundTrip
  • 9ee1e48 http2/hpack: prevent HeaderField from escaping during encoding
  • 1e71bd8 http2: prevent hanging Transport due to bad SETTINGS frame
  • 7bca150 internal/http3: respect net/http Server Shutdown context when shutting down
  • 44c41be internal/http3: prevent server from holding mutex when sleeping during shutdown
  • 228a67a internal/http3: add CloseIdleConnections support in transport
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the 依存関係 依存ライブラリのアップデート label Apr 1, 2026
… updates

Bumps the minor-and-patch group with 4 updates in the /builder directory: [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify), [github.com/yuin/goldmark](https://github.com/yuin/goldmark), [golang.org/x/image](https://github.com/golang/image) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/tdewolff/minify/v2` from 2.24.8 to 2.24.13
- [Release notes](https://github.com/tdewolff/minify/releases)
- [Commits](tdewolff/minify@v2.24.8...v2.24.13)

Updates `github.com/yuin/goldmark` from 1.7.16 to 1.8.2
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.7.16...v1.8.2)

Updates `golang.org/x/image` from 0.38.0 to 0.39.0
- [Commits](golang/image@v0.38.0...v0.39.0)

Updates `golang.org/x/net` from 0.49.0 to 0.53.0
- [Commits](golang/net@v0.49.0...v0.53.0)

---
updated-dependencies:
- dependency-name: github.com/tdewolff/minify/v2
  dependency-version: 2.24.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/image
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the minor-and-patch group in /builder with 4 updates chore(deps): bump the minor-and-patch group across 1 directory with 4 updates Apr 26, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/builder/minor-and-patch-17111c0165 branch from 44f0626 to 30591bf Compare April 26, 2026 13:17
@macrat macrat merged commit 44d1d5b into main Apr 26, 2026
7 checks passed
@macrat macrat deleted the dependabot/go_modules/builder/minor-and-patch-17111c0165 branch April 26, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

依存関係 依存ライブラリのアップデート

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant