Skip to content

chore(deps): Bump the dependencies group with 10 updates #358

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): Bump the dependencies group with 10 updates #358

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the dependencies group with 10 updates:

Package From To
filippo.io/age 1.2.1 1.3.1
github.com/a-h/templ 0.3.960 0.3.977
github.com/aws/aws-sdk-go-v2 1.40.0 1.41.0
github.com/aws/aws-sdk-go-v2/config 1.32.2 1.32.6
github.com/aws/aws-sdk-go-v2/credentials 1.19.2 1.19.6
github.com/aws/aws-sdk-go-v2/service/s3 1.92.1 1.95.0
github.com/go-playground/validator/v10 10.28.0 10.30.1
github.com/goccy/go-yaml 1.19.0 1.19.1
github.com/kaptinlin/jsonschema 0.6.1 0.6.5
github.com/tdewolff/minify/v2 2.24.7 2.24.8

Updates filippo.io/age from 1.2.1 to 1.3.1

Release notes

Sourced from filippo.io/age's releases.

v1.3.1 is a minor release to restore version injection from downstream package build processes.

See the v1.3.0 release notes for an overview of recent additions.

age v1.3.0: post-quantum (and more)!

Exactly six years after the first age beta release, v1.3.0 brings post-quantum resistance to age, along with a couple long-requested features, built-in support for recipients compatible with hardware plugins, I/O API improvements, and many usability enhancements.

Post-quantum recipients

age now has native post-quantum recipients based on HPKE with a hybrid ML-KEM-768 KEM. The recipients start with age1pq1..., and the identities start with AGE-SECRET-KEY-PQ-1....

To generate a post-quantum keypair:

$ age-keygen -pq

If you have your own age implementation, C2SP has the specification, and CCTV has test vectors for the new hybrid recipient types.

(If you are using an older age client, an optional plugin is available that provides out-of-the-box support for encryption to hybrid recipients. Hybrid identities can be converted to work with the plugin with age-plugin-pq -identity.)

New I/O APIs

The new DecryptReaderAt API implements seeking decryption, which can be used with zip.NewReader.

The new EncryptReader API implements pull-based encryption by wrapping an io.Reader, as opposed to wrapping an io.Writer like Encrypt.

age-inspect

The new age-inspect(1) tool presents the metadata of an age file without decrypting it.

hello.age is an age file, version "age-encryption.org/v1".

This file is ASCII-armored.


This file is encrypted to the following recipient types:


    

  • "mlkem768x25519"
    • 



This file uses post-quantum encryption.


Size breakdown (assuming it decrypts successfully):


Header                      1627 bytes
Armor overhead              1350 bytes
Encryption overhead           32 bytes
Payload                     1959 bytes
                    -------------------



</tr></table>

... (truncated)

Commits
  • b8564ad .github/workflows: inject version into source release artifact
  • e4c611f cmd,extra: restore the Version link-time variable
  • 6a8065f SIGSUM.md: update policy for v1.3.0
  • 50a600e .github/workflows: improve release reproducibility
  • 13aab81 .github/workflows: build and release source tarball
  • 52338c2 .github/workflows: enable GitHub artifact attestation
  • b70af41 cmd/age: don't output binary plaintext to terminal
  • 4202739 internal/stream: fix DecryptReaderAt concurrency
  • da21917 age: add ExampleDecryptReaderAt with zip.NewReader
  • 2ff5d34 age: add DecryptReaderAt
  • Additional commits viewable in compare view

Updates github.com/a-h/templ from 0.3.960 to 0.3.977

Release notes

Sourced from github.com/a-h/templ's releases.

v0.3.977

Changelog

  • e269629 chore: bump nix dependencies
  • e16061b chore: bump npm docs (npm audit fix)
  • acc6444 chore: bump versions in examples
  • 54b3856 chore: fix broken unit test
  • 8662cdb feat(proxy): flush streamed html (#1271)
  • dc31b64 feat: add Range to DocType nodes (#1302)
  • be9d6c9 feat: add Range to Whitespace nodes (#1301)
  • a74cfa9 feat: add prettier to templ info command
  • 0d69ba4 feat: add support for "fallthrough" in case statements (#1289)
  • a7df818 fix: LSP diagnostics on Windows (#1274)
  • 40d2b42 fix: LSP proxy SourceMapCache should not store nil SourceMaps (#1294)
  • 25dc2ce fix: normalize leading whitespaces in multiline go code (#1305)
  • 7be7dd6 fix: prevent templ fmt from adding whitespace to blank lines in inline functions (#1287)
  • 554eab8 fix: wait for proxy to be ready upon restart (#1299)
Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.40.0 to 1.41.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.2 to 1.32.6

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.2 to 1.19.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.92.1 to 1.95.0

Commits

Updates github.com/go-playground/validator/v10 from 10.28.0 to 10.30.1

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.29.0...v10.30.0

v10.29.0

What's Changed

New Contributors

... (truncated)

Commits

Updates github.com/goccy/go-yaml from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.19.1

What's Changed

Full Changelog: goccy/go-yaml@v1.19.0...v1.19.1

Commits

Updates github.com/kaptinlin/jsonschema from 0.6.1 to 0.6.5

Commits
  • 8098d67 chore: update dependencies and fix json-experiment API usage
  • e48ec48 refactor(bench): modernize benchmarks to use testing.B.Loop()
  • ded6476 refactor: simplify Compile method and remove redundant CompileWithID wrapper
  • 7ceb6c1 fix(schema): add backward compatibility for 'definitions' keyword
  • 0665fcb fix: simplify boolean expression in format test
  • e094a99 docs: add format validation guide and improve test coverage
  • 422538c Merge pull request #90 from kaptinlin/dependabot/go_modules/github.com/goccy/...
  • adf85cd Merge pull request #88 from kaptinlin/dependabot/github_actions/actions/check...
  • b8f889e chore(deps): bump github.com/goccy/go-yaml from 1.18.0 to 1.19.0
  • 8613c11 chore(deps): bump actions/checkout from 5 to 6
  • See full diff in compare view

Updates github.com/tdewolff/minify/v2 from 2.24.7 to 2.24.8

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.24.8

Commits
  • 8cf9eb3 Merge pull request #879 from VastBlast/js-bindings-rewrite
  • b5ecedf add optional minify overload with explicit required args
  • 3f34d2f add better memory leak test
  • f5efd76 remove flawed memory leak test (todo: add mem leak test)
  • 7aed404 update node workflow to work with new rewrite
  • 6a72bb1 require minimum node v20
  • c187fa0 rewrite readme
  • b7874bc rewrite example
  • eaa6c9e migrate existing tests to vitest and add many new tests
  • 63d6a81 use koffi types
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the dependencies group with 10 updates
61c0d7c 
Bumps the dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [filippo.io/age](https://github.com/FiloSottile/age) | `1.2.1` | `1.3.1` |
| [github.com/a-h/templ](https://github.com/a-h/templ) | `0.3.960` | `0.3.977` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.40.0` | `1.41.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.2` | `1.32.6` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.2` | `1.19.6` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.92.1` | `1.95.0` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.28.0` | `10.30.1` |
| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.19.0` | `1.19.1` |
| [github.com/kaptinlin/jsonschema](https://github.com/kaptinlin/jsonschema) | `0.6.1` | `0.6.5` |
| [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) | `2.24.7` | `2.24.8` |


Updates `filippo.io/age` from 1.2.1 to 1.3.1
- [Release notes](https://github.com/FiloSottile/age/releases)
- [Commits](FiloSottile/age@v1.2.1...v1.3.1)

Updates `github.com/a-h/templ` from 0.3.960 to 0.3.977
- [Release notes](https://github.com/a-h/templ/releases)
- [Commits](a-h/templ@v0.3.960...v0.3.977)

Updates `github.com/aws/aws-sdk-go-v2` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.40.0...v1.41.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.2 to 1.32.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.32.2...v1.32.6)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.2 to 1.19.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.2...service/m2/v1.19.6)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.92.1 to 1.95.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.92.1...service/s3/v1.95.0)

Updates `github.com/go-playground/validator/v10` from 10.28.0 to 10.30.1
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.28.0...v10.30.1)

Updates `github.com/goccy/go-yaml` from 1.19.0 to 1.19.1
- [Release notes](https://github.com/goccy/go-yaml/releases)
- [Changelog](https://github.com/goccy/go-yaml/blob/master/CHANGELOG.md)
- [Commits](goccy/go-yaml@v1.19.0...v1.19.1)

Updates `github.com/kaptinlin/jsonschema` from 0.6.1 to 0.6.5
- [Commits](kaptinlin/jsonschema@v0.6.1...v0.6.5)

Updates `github.com/tdewolff/minify/v2` from 2.24.7 to 2.24.8
- [Release notes](https://github.com/tdewolff/minify/releases)
- [Commits](tdewolff/minify@v2.24.7...v2.24.8)

---
updated-dependencies:
- dependency-name: filippo.io/age
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/a-h/templ
  dependency-version: 0.3.977
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.95.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/goccy/go-yaml
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/kaptinlin/jsonschema
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/tdewolff/minify/v2
  dependency-version: 2.24.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant