Bump the all-updates group with 4 updates by dependabot[bot] · Pull Request #1038 · cirruslabs/cirrus-cli

dependabot · 2026-03-16T02:15:32Z

Bumps the all-updates group with 4 updates: golang.org/x/crypto, golang.org/x/text, github.com/bartventer/httpcache and github.com/testcontainers/testcontainers-go.

Updates golang.org/x/crypto from 0.48.0 to 0.49.0

Commits

982eaa6 go.mod: update golang.org/x dependencies
159944f ssh,acme: clean up tautological/impossible nil conditions
a408498 acme: only require prompt if server has terms of service
cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
2f26647 x509roots/fallback: update bundle
See full diff in compare view

Updates golang.org/x/text from 0.34.0 to 0.35.0

Commits

7ca2c6d go.mod: update golang.org/x dependencies
73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates github.com/bartventer/httpcache from 0.12.0 to 0.13.0

Release notes

Sourced from github.com/bartventer/httpcache's releases.

v0.13.0: URL key normalization API + cache correctness fixes (2026-03-14)

Highlights

New reusable urlkey package for canonical URL normalization.

Fixes that improve Vary-handling correctness and cache stability.

No breaking API changes.

What's Changed

✨ Features
Expose reusable URL cache-key normalization package (urlkey)
Added a public API for normalized URL cache-key generation.

by @bartventer in bartventer/httpcache#34 and bartventer/httpcache#35
Example usage:
import "github.com/bartventer/httpcache/pkg/urlkey"
url := "https://EXAMPLE.com:443/a/./b/../c?q=%7e1#fragment"
fmt.Println(urlkey.Normalize(url)) // https://example.com/a/c?q=~1
Note: This package is used internally for consistent URL normalization in cache key generation; it can now be reused in other contexts where canonical URL forms are needed.
🐛 Fixes

Handle multiple Vary header lines correctly

Includes all Vary header lines when building normalized vary keys; adds regression tests.

by @bartventer in bartventer/httpcache#33 (closes bartventer/httpcache#32)

Return immediately on upstream RoundTrip error

Prevents nil-response dereference when transport returns an error.

by @cih9088 in bartventer/httpcache#29

Refresh stored headers on 304 Not Modified revalidation

Updates cached metadata from 304 responses per RFC 9111 §4.3.4; adds regression/integration coverage.

by @cih9088 in bartventer/httpcache#27

🔧 Other

Go/CI updates and internal housekeeping by @bartventer in bartventer/httpcache#34 and bartventer/httpcache#35.

Add SECURITY.md with supported versions and vulnerability reporting guidance by @bartventer (60e8c9fbd7f1bf0192743106b39ea6a2a7b881e5)

New Contributors

@cih9088 made their first contribution in bartventer/httpcache#27

Full Changelog: bartventer/httpcache@v0.12.0...v0.13.0

The project is nearing a stable v1.0.0 milestone.
Any further feedback, issues, or contributions are welcome as we finalize the implementation and documentation.

Commits

cf5ae53 refactor(urlkey): rename FromURL to Normalize (#35)
6a7e77a refactor(urlkey): rename FromURL to Normalize
338eccb feat(urlkey): expose URL cache-key normalization; include maintenance updates...
56a31b6 fix: handle multiple Vary header lines (#33)
1b1dd0f fix: return error immediately on roundtrip error (#29)
3cfaeec fix: refresh stored headers on 304 revalidation (#27)
60e8c9f docs: Add security policy [skip ci]
See full diff in compare view

Updates github.com/testcontainers/testcontainers-go from 0.40.0 to 0.41.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.41.0

What's Changed

🚀 Features

feat: add TiDB module (#3575) @iyiola-dev

feat: add Forgejo module (#3556) @s04

feat: improve container conflict detection (#3574) @Desuuuu

feat(azure): add lowkey vault container (#3542) @nagyesta

feat(chroma): update to chroma 1.x (#3552) @tazarov

feat(cassandra): add ssl option cassandra (#3151) @MitulShah1

🐛 Bug Fixes

fix(redpanda): closing provider in test after use (#3539) @mabrarov

fix: docker auth for docker.io images (#3482) @LaurentGoderre

fix(solace): set ulimits for container (#3497) @mdelapenya

fix(kafka): strip architecture suffix from Kafka image tags for semver parsing (#3276) @asahasrabuddhe

📖 Documentation

docs(metrics): automate usage metrics collection and publish it in the docs site (#3495) @mdelapenya

🧹 Housekeeping

chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#3560) @dependabot[bot]

chore(pulsar): bump base image to 4.x, replacing the wait for log strategy with wait for listening port (deterministic) (#3573) @mdelapenya

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.0.0 to 1.3.1 in /modules/dockermcpgateway (#3557) @dependabot[bot]

chore: update usage metrics (2026-03-02) (#3565) @github-actions[bot]

chore(deps): bump mkdocs-include-markdown-plugin from 7.2.0 to 7.2.1 (#3547) @dependabot[bot]

chore(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1 (#3546) @dependabot[bot]

chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 (#3545) @dependabot[bot]

chore: update usage metrics (2026-02-02) (#3551) @github-actions[bot]

chore(deps): bump pymdown-extensions from 10.8.1 to 10.16.1 (#3513) @dependabot[bot]

chore: update usage metrics (2026-01-01) (#3515) @github-actions[bot]

chore: update usage metrics (2025-12-01) (#3506) @github-actions[bot]

chore(metrics): allow sending PRs from the workflow (#3503) @mdelapenya

fix(metrics): use the right CSV file (#3502) @mdelapenya

fix(metrics): use the right CSV file (#3501) @mdelapenya

chore(metrics): even better rate limit strategy (#3500) @mdelapenya

chore(metrics): properly detect rate limits (#3499) @mdelapenya

fix(metrics): set GH _TOKEN in workflow (#3498) @mdelapenya

📦 Dependency updates

fix: update compose-replace Makefile target to use compose/v5 (#3590) @mdelapenya

chore(deps): bump atomicjar/testcontainers-cloud-setup-action from 1.3.0 to 1.4.0 (#3559) @dependabot[bot]

chore(deps): bump golang.org/x/text from 0.14.0 to 0.34.0 in /modulegen (#3582) @dependabot[bot]

chore(deps): bump mkdocs-codeinclude-plugin from 0.2.1 to 0.3.1 (#3579) @dependabot[bot]

chore(deps): bump golang.org/x/mod from 0.16.0 to 0.33.0 in /modulegen (#3583) @dependabot[bot]

chore(deps): bump github.com/aerospike/aerospike-client-go/v8 from 8.2.0 to 8.6.0 in /modules/aerospike (#3584) @dependabot[bot]

... (truncated)

Commits

2ea97c8 chore: use new version (v0.41.0) in modules and examples
9a663f7 fix: update compose-replace Makefile target to use compose/v5 (#3590)
10481c2 chore(deps): bump atomicjar/testcontainers-cloud-setup-action (#3559)
bdb12dd chore(deps): bump golang.org/x/text from 0.14.0 to 0.34.0 in /modulegen (#3582)
5bd7f07 chore(deps): bump mkdocs-codeinclude-plugin from 0.2.1 to 0.3.1 (#3579)
c9ccfc5 chore(deps): bump golang.org/x/mod from 0.16.0 to 0.33.0 in /modulegen (#3583)
21ec740 chore(deps): bump github.com/aerospike/aerospike-client-go/v8 from 8.2.0 to 8...
fb47b82 chore(deps): bump golang.org/x/mod in /modules/localstack (#3587)
6686e31 chore(deps): bump golang.org/x/mod in /modules/elasticsearch (#3585)
0656548 chore(deps): bump golang.org/x/mod in /modules/redpanda (#3588)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-updates group with 4 updates: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/text](https://github.com/golang/text), [github.com/bartventer/httpcache](https://github.com/bartventer/httpcache) and [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go). Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0 - [Commits](golang/crypto@v0.48.0...v0.49.0) Updates `golang.org/x/text` from 0.34.0 to 0.35.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.34.0...v0.35.0) Updates `github.com/bartventer/httpcache` from 0.12.0 to 0.13.0 - [Release notes](https://github.com/bartventer/httpcache/releases) - [Commits](bartventer/httpcache@v0.12.0...v0.13.0) Updates `github.com/testcontainers/testcontainers-go` from 0.40.0 to 0.41.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.40.0...v0.41.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: golang.org/x/text dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/bartventer/httpcache dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 16, 2026

dependabot Bot requested review from edigaryev and fkorotkov as code owners March 16, 2026 02:15

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 16, 2026

edigaryev approved these changes Mar 16, 2026

View reviewed changes

edigaryev merged commit 22d8c52 into main Mar 16, 2026
11 checks passed

edigaryev deleted the dependabot/go_modules/all-updates-dde6f77fda branch March 16, 2026 11:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-updates group with 4 updates#1038

Bump the all-updates group with 4 updates#1038
edigaryev merged 1 commit into
mainfrom
dependabot/go_modules/all-updates-dde6f77fda

dependabot Bot commented on behalf of github Mar 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 16, 2026

v0.13.0: URL key normalization API + cache correctness fixes (2026-03-14)

Highlights

What's Changed

✨ Features

🐛 Fixes

🔧 Other

New Contributors

v0.41.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant