chore(deps): update golang devdeps non-major

[renovate]

This PR contains the following updates:

Package	Update	Change
golangci/golangci-lint	minor	v1.59.0 → v1.64.8
mvdan/gofumpt	minor	v0.6.0 → v0.9.2

---

Release Notes

golangci/golangci-lint (golangci/golangci-lint)

v1.64.8

Compare Source

• Detects use of configuration files from golangci-lint v2

v1.64.7

Compare Source

1. Linters bug fixes
   • depguard: from 2.2.0 to 2.2.1
   • dupl: from 3e9179a to f665c8d
   • gosec: from 2.22.1 to 2.22.2
   • staticcheck: from 0.6.0 to 0.6.1
2. Documentation
   • Add GitLab documentation

v1.64.6

Compare Source

1. Linters bug fixes
   • asciicheck: from 0.4.0 to 0.4.1
   • contextcheck: from 1.1.5 to 1.1.6
   • errcheck: from 1.8.0 to 1.9.0
   • exptostd: from 0.4.1 to 0.4.2
   • ginkgolinter: from 0.19.0 to 0.19.1
   • go-exhaustruct: from 3.3.0 to 3.3.1
   • gocheckcompilerdirectives: from 1.2.1 to 1.3.0
   • godot: from 1.4.20 to 1.5.0
   • perfsprint: from 0.8.1 to 0.8.2
   • revive: from 1.6.1 to 1.7.0
   • tagalign: from 1.4.1 to 1.4.2

v1.64.5

Compare Source

1. Bug fixes
   • Add missing flag new-from-merge-base-flag
2. Linters bug fixes
   • asciicheck: from 0.3.0 to 0.4.0
   • forcetypeassert: from 0.1.0 to 0.2.0
   • gosec: from 2.22.0 to 2.22.1

v1.64.4

Compare Source

1. Linters bug fixes
   • gci: fix standard packages list for go1.24

v1.64.3

Compare Source

1. Linters bug fixes
   • ginkgolinter: from 0.18.4 to 0.19.0
   • go-critic: from 0.11.5 to 0.12.0
   • revive: from 1.6.0 to 1.6.1
   • gci: fix standard packages list for go1.24
2. Misc.
   • Build Docker images with go1.24

v1.64.2

Compare Source

This is the last minor release of golangci-lint v1.
The next release will be golangci-lint v2.

1. Enhancements
   • 🎉 go1.24 support
   • New issues.new-from-merge-base option
   • New run.relative-path-mode option
2. Linters new features
   • copyloopvar: from 1.1.0 to 1.2.1 (support suggested fixes)
   • exptostd: from 0.3.1 to 0.4.1 (handles golang.org/x/exp/constraints.Ordered)
   • fatcontext: from 0.5.3 to 0.7.1 (new option: check-struct-pointers)
   • perfsprint: from 0.7.1 to 0.8.1 (new options: integer-format, error-format, string-format, bool-format, and hex-format)
   • revive: from 1.5.1 to 1.6.0 (new rules: redundant-build-tag, use-errors-new. New option early-return.early-return)
3. Linters bug fixes
   • go-errorlint: from 1.7.0 to 1.7.1
   • gochecknoglobals: from 0.2.1 to 0.2.2
   • godox: from 006bad1 to 1.1.0
   • gosec: from 2.21.4 to 2.22.0
   • iface: from 1.3.0 to 1.3.1
   • nilnesserr: from 0.1.1 to 0.1.2
   • protogetter: from 0.3.8 to 0.3.9
   • sloglint: from 0.7.2 to 0.9.0
   • spancheck: fix default StartSpanMatchersSlice values
   • staticcheck: from 0.5.1 to 0.6.0
4. Deprecations
   • ⚠️ tenv is deprecated and replaced by usetesting.os-setenv: true.
   • ⚠️ exportloopref deprecation step 2
5. Misc.
   • Sanitize severities by output format
   • Avoid panic with plugin without description
6. Documentation
   • Clarify depguard configuration

v1.63.4

Compare Source

1. Linters bug fixes
   • dupl, gomodguard, revive: keep only Go-files.

v1.63.3

Compare Source

1. Linters bug fixes
   • gofmt, gofumpt, goimports, gci: panic with several trailing EOL
   • goheader: skip issues with invalid positions

v1.63.2

Compare Source

1. Linters bug fixes
   • gofmt, gofumpt, goimports, gci: panic with missing trailing EOL

v1.63.1

Compare Source

1. Linters bug fixes
   • cgi: invalid reports with cgo
   • gofumpt: panic with autofix and cgo

v1.63.0

Compare Source

1. Enhancements
   • Add support for SuggestedFixes 🎉 (35 linters can "autofix" reports).
   • Formatters (gofmt, goimports, gofumpt, gci) are applied after the suggested fixes.
2. New linters
   • Add exptostd linter https://github.com/ldez/exptostd
   • Add nilnesserr linter https://github.com/alingse/nilnesserr
   • Add usetesting linter https://github.com/ldez/usetesting
3. Linters new features
   • gci: new options: no-inline-comments, no-prefix-comments
   • gomoddirectives: from 0.2.4 to 0.6.0 (new options: go-version-pattern, toolchain-pattern,toolchain-forbidden, tool-forbidden, go-debug-forbidden)
   • govet: new stdversion, waitgroup analyzers
   • importas: allow multiple empty aliases
   • loggercheck: new slog option
   • recvcheck: from 0.1.2 to 0.2.0 (new options: disable-builtin, exclusions)
   • tagliatelle: from 0.5.0 to 0.7.1 (new options: ignored-fields, extended-rules,overrides, pkg, ignore)
   • usestdlibvars: from 1.27.0 to 1.28.0 (autofix)
   • wrapcheck: from 2.9.0 to 2.10.0 (new option: extra-ignore-sigs)
4. Linters bug fixes
   • asciicheck: from 0.2.0 to 0.3.0
   • bodyclose: from 5742072 to ed6a65f
   • funlen: from 0.1.0 to 0.2.0
   • ginkgolinter: from 0.18.3 to 0.18.4
   • gochecksumtype: from 0.2.0 to 0.3.1
   • gocognit: from 1.1.3 to 1.2.0
   • godot: from 1.4.18 to 1.4.20
   • goheader: report position improvement
   • gosec: handling of global nosec option when it is false
   • iface: from 1.2.1 to 1.3.0
   • importas: from 0.1.0 to 0.2.0
   • intrange: from 0.2.1 to 0.3.0
   • makezero: from 1.1.1 to 1.2.0
   • mirror: from 1.2.0 to 1.3.0
   • nilnil: from 1.0.0 to 1.0.1
   • nosprintfhostport: from 0.1.1 to 0.2.0
   • reassign: from 0.2.0 to 0.3.0
   • spancheck: from 0.6.2 to 0.6.4
   • tagalign: from 1.3.4 to 1.4.1
   • wastedassign: from 2.0.7 to 2.1.0
   • whitespace: from 0.1.1 to 0.2.0
   • wsl: from 4.4.1 to 4.5.0
5. Deprecations
   • ⚠️ output.uniq-by-line is deprecated and replaced by issues.uniq-by-line.
6. Misc.
   • Improvements of the help command (color and JSON support).
   • Removes decoder, sloglint, tagalign from format preset.
   • Enables paths with junction inside Windows.
   • The timeout is disabled if run.timeout <= 0.

v1.62.2

Compare Source

1. Linters bug fixes
   • fatcontext: from 0.5.2 to 0.5.3
   • ginkgolinter: from 0.18.0 to 0.18.3
   • errorlint: from 1.6.0 to 1.7.0
   • iface: from 1.2.0 to 1.2.1
   • revive: from 1.5.0 to 1.5.1
   • testifylint: from 1.5.0 to 1.5.2
2. Misc.
   • fix: ignore cache error when file not found

v1.62.0

Compare Source

1. New linters
   • Add recvcheck linter https://github.com/raeperd/recvcheck
   • Add iface linter https://github.com/uudashr/iface
2. Linters new features
   • ginkgolinter: from 0.17.0 to 0.18.0 (new option: force-succeed)
   • gochecksumtype: from 0.1.4 to 0.2.0 (new option: default-signifies-exhaustive)
   • loggercheck: from 0.9.4 to 0.10.1 (log/slog support)
   • nilnil: from 0.1.9 to 1.0.0 (new option: detect-opposite)
   • revive: from 1.3.9 to 1.5.0 (new rules: filename-format, and file-length-limit)
   • tenv: from 1.10.0 to 1.12.1 (handle dot import)
   • testifylint: from 1.4.3 to 1.5.0 (new checkers: contains, encoded-compare, regexp)
3. Linters bug fixes
   • bidichk: from 0.2.7 to 0.3.2 (important performance improvement)
   • canonicalheader: from 1.1.1 to 1.1.2
   • cyclop: from 1.2.1 to 1.2.3
   • dupword: from 0.1.1 to 0.1.3
   • errcheck: from 1.7.0 to 1.8.0
   • errchkjson: from 0.3.6 to 0.4.0
   • errname: from 0.1.13 to 1.0.0
   • gocritic: from 0.11.4 to 0.11.5
   • goprintffuncname: from 7558a9e to v0.1.0
   • godot: from 1.4.17 to 1.4.18
   • gosec: from 2.21.2 to 2.21.4
   • intrange: from 0.2.0 to 0.2.1
   • musttag: from 0.12.2 to 0.13.0
   • nakedret: from 2.0.4 to 2.0.5
   • noctx: from 0.0.2 to 0.1.0
   • protogetter: from 0.3.6 to 0.3.8
4. Deprecations
   • ⚠️ execinquery: deprecation step 2
   • ⚠️ gomnd: deprecation step 2 (replaced by mnd)
5. Misc.
   • Type sizing when cross-compiling (32-bit).
   • code-climate: add check_name field
   • Improve Go version detection
   • Fix Go version propagation
6. Documentation
   • Adds a section about exclude-dirs-use-default
   • Improve 'install from sources' section
   • Improve FAQ about Go versions
   • Improve linter/rule/check docs
   • Improve new linter section
   • Improve forbidigo pattern examples for built-in functions

v1.61.0

Compare Source

1. Enhancements
   • Add junit-xml-extended format
   • Exclude Swagger Codegen files by default
2. Linters new features
   • gci: from 0.13.4 to 0.13.5 (new option no-lex-order)
   • nolintlint: remove the empty line in the directive replacement
3. Linters bug fixes
   • dupword: from 0.0.14 to 0.1.1
   • fatcontext: from 0.4.0 to 0.5.2
   • go-ruleguard: from 0.4.2 to 0fe6f58 (fix panic with custom linters)
   • godot: from 1.4.16 to 1.4.17
   • gomodguard: from 1.3.3 to 1.3.5
   • gosec: disable temporarily G407
   • gosec: from ab3f6c1 to 2.21.2 (partially fix G115)
   • intrange: from 0.1.2 to 0.2.0
4. Misc.
   • Improve runtime version parsing
5. Documentation
   • Add additional info about typecheck

v1.60.3

Compare Source

1. Updated linters
   • gosec: from 81cda2f to ab3f6c1 (fix G115 false positives)
2. Misc.
   • Check that the Go version use to build is greater or equals to the Go version of the project

v1.60.2

Compare Source

1. Linters new features
   • gosec: from 5f0084e to 81cda2f (adds G115, G405, G406, G506, G507)
2. Linters bug fixes
   • gofmt: update to HEAD (go1.22)
   • gofumpt: from 0.6.0 to 0.7.0
   • gosec: fix G602 analyzer
   • staticcheck: from 0.5.0 to 0.5.1
   • staticcheck: propagate Go version
   • wrapcheck: from 2.8.3 to 2.9.0
3. Deprecations
   • ⚠️ exportloopref: deprecation

v1.60.1

Compare Source

1. Misc.
   • 🎉 go1.23 support
2. Linters new features
   • exhaustruct: from 3.2.0 to 3.3.0 (recognize custom error values in return)
   • govet (printf): report non-constant format, no args
   • lll: advertise max line length instead of just reporting failure
   • revive: from 1.3.7 to 1.3.9 (new rule: comments-density)
   • staticcheck: from 0.4.7 to 0.5.0
   • testifylint: from 1.3.1 to 1.4.3 (new options: formatter, suite-broken-parallel, suite-subtest-run)
3. Linters bug fixes
   • errorlint: from 1.5.2 to 1.6.0
   • fatcontext: from 0.2.2 to 0.4.0 (fix false positives for context stored in structs)
   • gocognit: from 1.1.2 to 1.1.3
   • gomodguard: from 1.3.2 to 1.3.3
   • sloglint: from 0.7.1 to 0.7.2
   • spancheck: from 0.6.1 to 0.6.2
   • tenv: from 1.7.1 to 1.10.0 (remove reports on fuzzing)
   • tparallel: from 0.3.1 to 0.3.2
   • usestdlibvars: from 1.26.0 to 1.27.0 (fix false-positive with number used inside a mathematical operations)
   • wsl: from 4.2.1 to 4.4.1
4. Deprecations
   • ️⚠️ unused: remove exported-is-used option
5. Fixes
   • SARIF: sanitize level property
   • ️⚠️ typecheck issues should never be ignored
6. Documentation
   • Add link on linter without configuration
   • Remove 'trusted by' page
   • wsl update documentation of the configuration

v1.59.1

Compare Source

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• f738736 build(deps): bump github.com/Antonboom/testifylint from 1.3.0 to 1.3.1 (#​4759)
• 44b3cdd build(deps): bump github.com/go-viper/mapstructure/v2 from 2.0.0-alpha.1 to 2.0.0 (#​4788)
• 1a55854 build(deps): bump github.com/golangci/misspell from 0.5.1 to 0.6.0 (#​4804)
• 9a7a1ad build(deps): bump github.com/polyfloyd/go-errorlint from 1.5.1 to 1.5.2 (#​4785)
• aaff918 build(deps): bump github.com/sashamelentyev/usestdlibvars from 1.25.0 to 1.26.0 (#​4801)
• a0d2c83 build(deps): bump github.com/shirou/gopsutil/v3 from 3.24.4 to 3.24.5 (#​4782)
• 2042b1f build(deps): bump go-simpler.org/sloglint from 0.7.0 to 0.7.1 (#​4784)
• 327a78a build(deps): bump golang.org/x/tools from 0.21.0 to 0.22.0 (#​4802)
• e1a8055 fix: SARIF format require issue column >= 1 (#​4775)
• 88f60c8 fix: gomnd deprecated configuration compatibility (#​4768)
• 8173166 fix: init empty result slice for SARIF printer (#​4758)
• 02740ea intrange: add style preset (#​4797)
• 615b873 unparam: bump to HEAD (#​4786)

mvdan/gofumpt (mvdan/gofumpt)

v0.9.2

Compare Source

This release moves the "clothe naked returns" rule under gofumpt -extra, following the discussion in #​285.

Binaries built on go version go1.25.3 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release!

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

v0.9.1

Compare Source

This is a bugfix release to address a regression in detecting
comment directives with special characters such as //golangcitest:config_path.

v0.9.0

Compare Source

This release is based on Go 1.25's gofmt, and requires Go 1.24 or later.

A new rule is introduced to "clothe" naked returns for the sake of clarity.
While there is nothing wrong with naming results in function signatures,
using lone return statements can be confusing to the reader.

Go 1.25's ignore directives in go.mod files are now obeyed;
any directories within the module matching any of the patterns
are now omitted when walking directories, such as with gofumpt -w ..

Module information is now loaded via Go's x/mod/modfile package
rather than executing go mod edit -json, which is way faster.
This should result in moderate speed-ups when formatting many directories.

v0.8.0

Compare Source

This release is based on Go 1.24's gofmt, and requires Go 1.23 or later.

The following changes are included:

• Fail with -d if formatting any file resulted in a diff - #​114
• Do not panic when a go.mod file is missing a go directive - #​317

v0.7.0

Compare Source

This release is based on Go 1.23.0's gofmt, and requires Go 1.22 or later.

The following changes are included:

• Group internal/... imported packages as standard library - #​307

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.