fix(deps): update go dependencies#37752
Merged
Merged
Conversation
Collaborator
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
silverwind
approved these changes
May 18, 2026
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the project’s Go module dependencies to newer patch/minor versions, keeping Gitea aligned with upstream fixes and security/compatibility updates while preserving the existing module structure.
Changes:
- Bump multiple direct dependencies (e.g.
code.gitea.io/sdk/gitea,gitea.com/gitea/runner,github.com/getkin/kin-openapi,golang.org/x/*,modernc.org/sqlite). - Refresh indirect dependency versions pulled in by the updates (e.g.
github.com/fxamacker/cbor/v2,github.com/go-webauthn/x,modernc.org/libc,modernc.org/cc*). - Update
go.sumchecksums to match the new resolved module graph.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| go.mod | Updates required (direct/indirect) module versions to the targeted newer releases. |
| go.sum | Updates module checksums to reflect the new dependency resolution. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
lunny
approved these changes
May 18, 2026
GiteaBot
added
the
lgtm/done
silverwind
added
the
reviewed/wait-merge
Collaborator
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
GiteaBot
removed
the
reviewed/wait-merge
silverwind
added a commit
to silverwind/gitea
that referenced
this pull request
May 19, 2026
* origin/main: (104 commits) fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] (go-gitea#37786) fix(pull): handle empty pull request files view to allow reviews (go-gitea#37783) fix(markup): make RenderString never fail (go-gitea#37779) fix(markup): wrap indented code blocks for the code-copy button (go-gitea#37748) fix(permissions): Fix reading permission (go-gitea#37769) fix: add natural sort to sortTreeViewNodes (go-gitea#37772) fix: package creation unique conflict (go-gitea#37774) fix(deps): update npm dependencies (go-gitea#37768) fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v2.26.0 (go-gitea#37771) ci: split giteabot workflow (go-gitea#37770) [skip ci] Updated translations via Crowdin fix: Unify public-only token filtering in API queries and repo access checks (go-gitea#37118) fix(deps): update module google.golang.org/grpc to v1.81.1 (go-gitea#37762) chore: make DefaultTitleSource default to auto to match GitHub (go-gitea#37767) ci: fix cache-related issues (go-gitea#37761) chore: fix tests (go-gitea#37760) refactor(waitgroup): replace Add/Done goroutines with WaitGroup.Go (go-gitea#37764) fix(deps): update go dependencies (go-gitea#37752) chore(deps): update action dependencies (go-gitea#37751) fix(deps): update module github.com/google/go-github/v85 to v86 (go-gitea#37754) ... # Conflicts: # .github/workflows/pull-db-tests.yml # modules/storage/s3_test.go
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.25.0→v0.25.1v1.0.0→v1.0.3v1.0.4v0.137.0→v0.138.0v2.21.1→v2.21.2v0.17.2→v0.17.3545e8a4→92041b7v0.7.2→v0.7.3v2.24.1→v2.25.0v2.27.0(+2)v0.50.0→v0.51.0v0.39.0→v0.40.0v0.53.0→v0.54.0v0.36.0→v0.37.0v1.50.0→v1.50.1Release Notes
gitea/runner (gitea.com/gitea/runner)
v1.0.3Compare Source
Changelog
dario.cat/mergo) (#954)dbfs_datais cleaned up after task completion (#952)v1.0.2Compare Source
Changelog
Starting job containergroup (#940)v1.0.1Compare Source
Changelog
dff63b3fix(deps): update module github.com/go-git/go-git/v5 to v5.19.0 (#934)a5d9fe9fix(deps): update module github.com/opencontainers/selinux to v1.14.0 (#928)d607f3btest: clean up dead/stale fixtures and bump test container images (#932)5e59402fix: re-fetch cached reusable workflow on every run (#930)dfeb463chore(deps): update docker docker tag to v29 (#924)getkin/kin-openapi (github.com/getkin/kin-openapi)
v0.138.0Compare Source
What's Changed
Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0
go-co-op/gocron (github.com/go-co-op/gocron/v2)
v2.21.2Compare Source
What's Changed
New Contributors
Full Changelog: go-co-op/gocron@v2.21.1...v2.21.2
go-webauthn/webauthn (github.com/go-webauthn/webauthn)
v0.17.3Compare Source
Dependency Updates
This release just contains updates to dependencies.
wneessen/go-mail (github.com/wneessen/go-mail)
v0.7.3: : Skippable UTF-8 support, improved Base64LineBreaker, binary size reducing, fixes and moreCompare Source
Welcome to go-mail v0.7.3! 🎉
This release brings some cool improvements, new features, and fixes to go-mail. We hope you enjoy it!
Notable changes/improvements/features/fixes
Deadline fix for connections to a TLS port without TLS
PR #521 fixes a missing deadline in the
Clientthat could cause a deadlock for connections to a TLS port without TLS enabled. Thanks to @james-d-elliott for finding and fixing this issue!Preseve EHLO and HELO errors
PR #528 fixes an error for cases in which both the HELO and EHLO fail during a client connect. In this case the first error would be overwritten by the 2nd action, potentially deleting valuable information. In go-mail v0.7.3 both errors are now combined. Thanks to @Yanhu007 for their contribution!
Improved Base64LineBreaker
In PR #512 @srpvpn refactored the
Base64LineBreakertype to be more performant and easier to read by removing the recursion. Thanks for your contribution!Reduce binary size by making text/template and html/template support optional
In PR #518 @sblinch introduced a new compile time flag
gomailnotplwhich will make thetext/templateandhtml/templateoptional. Background is, that usingreflect.Value.Methodorreflect.Value.MethodByNameprevents Go from performing full dead-code elimination because any exported method of any struct in the codebase could potentially be referenced at runtime. Unfortunatelytext/templateandhtml/templatedo exactly this to allow method invocation from within templates. So in case your code does not need template support, you can use the new compile flag to remove the support for both packages completely and same some bytes in the resulting binary. Thanks for your contribution!Fix nil pointer panic in partWriter
PR #543 fixes a potential nil pointer panic in the partWriter in case the underlying
io.Writerreturns an error during a multipart message write. Thanks to @UgurTheG for reporting and fixing the issue!Provide access to HELO responses in the SMTP client
PR #530 adds support to access the HELO/EHLO responses via the
smtp.Client. This feature is useful when using an SMTP servers pool behind a load balancer, to know which instance took the job. Thanks to @maxatome for submitting this feature!Multiple addresses support in ReplyTo header
PR #517 adds support for multiple
Reply-Toaddresses within aMsg, as permitted in RFC5322. Thanks to @christian-heusel for pointing this out and for comitting the PR!Support to disable SMTPUTF8 in the MAIL FROM even if the server announces it
PR #548 adds support for skipping the
SMTPUTF8extension toMAIL FROMcommands. By default, when a server announcesSMTPUTF8support in the EHLO, go-mail will addSMTPUTF8to theMAIL FROMcommand. As pointed out in #545, some SMTP servers (e. g. specific MS Exchange versions) announce the SMTPUTF8 extension in the EHLO response but when adding the SMTPUTF8 to the MAIL FROM, they will fail with an error. The PR introduces a newWithoutSMTPUTF8()option for theClientwhich will make sure to skip the SMTPUTF8 extension in the MAIL FROM, even if the server announced it previously. Thanks @mkalus for reporting this issue and for their detailed analysis in #545.What's Changed
SendWithSMTPClientto improve error handling and added test cases by @wneessen in #502CI/CD maintenance changes
golang.org/x/textmodule versions by @wneessen in #526.golangci.tomlfor linter exclusions on specific use cases by @wneessen in #523New Contributors
Full Changelog: wneessen/go-mail@v0.7.2...v0.7.3
gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go/v2)
v2.25.0Compare Source
2.25.0
🚀 Features
🔄 Other Changes
maincausing pipeline failures (!2882) by Patrick Rice2.25.0 (2026-05-11)
Features
cznic/sqlite (modernc.org/sqlite)
v1.50.1Compare Source
Configuration
📅 Schedule: (UTC)
* * * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.