Skip to content

Build(deps): Bump the go-minor-patch group with 6 updates - #8889

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-afbf24ebe0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-afbf24ebe0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 6 updates:

Package From To
github.com/dave/dst 0.27.4 0.28.0
github.com/maxbrunsfeld/counterfeiter/v6 6.12.2 6.14.0
golang.org/x/crypto 0.55.0 0.57.0
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/sync 0.22.0 0.23.0
golang.org/x/text 0.41.0 0.42.0

Updates github.com/dave/dst from 0.27.4 to 0.28.0

Commits
  • a42bf06 Merge pull request #88 from dave/upgrade-go
  • e25530b Add File.GoVersion
  • 5b65eee Upgrade jennifer to v1.7.1
  • 4c94819 Update the standard library test for current Go releases
  • b4b6438 Fix runs of blank lines being dropped
  • 3b37252 Rename examples that don't refer to an identifier
  • 1abe3fa gendst: fix position handling when slicing positions.go
  • d79dc80 gofmt
  • 73b5e95 Upgrade dependencies and switch from Travis to GitHub Actions
  • See full diff in compare view

Updates github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.2 to 6.14.0

Release notes

Sourced from github.com/maxbrunsfeld/counterfeiter/v6's releases.

v6.14.0

This release has two additions to the fake API for reading back what a fake was called with, a fix for a race in methods without return values, and a guide for anyone coming from gomock.

Inspecting calls

  • 🆕 <Method>Args() returns every call to a method as a slice of structs, with one exported field per argument: FakeMySpecialInterfaceDoThingsArgs{Arg1: "stuff", Arg2: 5}. You can check a whole call with one Equal or cmp.Diff, and skip an argument with cmpopts.IgnoreFields. Function fakes get the same thing as Args(). ArgsForCall still works as before. @​dnephin asked for this in 2018. (#392, fixes #106)
  • 🆕 CallOrder() returns the names of a fake's methods in the order they were called, so you can assert that, for example, Write() was called before Commit(). Order across two fakes still isn't recorded; the gomock guide has a stub recipe for that. (#394, fixes #113)

Fixes

  • 🐛 A method with no return values called its stub field again after unlocking, instead of the copy it took under the lock. Swapping the stub from another goroutine at that moment was a data race, and Calls(nil) could panic the caller. Both templates call the copy now. (#389)

📖 Docs

  • docs/migrating-from-gomock.md maps gomock's controller, expectations, matchers, call counts and ordering onto a fake's Returns, Calls, ArgsForCall, CallCount, Args and CallOrder, with the same check shown in testing, testify and gomega.

🧹 Housekeeping

  • ⬆️ gomega 1.43.1 (#391). go-cmp is a direct dependency now because a spec imports it; it was already in go.mod through gomega, and a module that has counterfeiter as a tool sees no change.
  • ⬆️ CodeQL actions
  • the one table test in the generator package is a spec suite like the rest (#393)

Regenerating produces a diff in every fake: the per-method record is the new struct type, and the fake keeps the call order.

Full Changelog: maxbrunsfeld/counterfeiter@v6.13.0...v6.14.0

v6.13.0

It's been a while since a release here had anything in it but dependency bumps. This one closes some of the oldest issues on the tracker: fakes can be generated into the interface's own package or into <package>_test, flags on the -generate line apply to every directive, loading is two to three times faster, and the README documents every flag.

counterfeiter now requires go 1.26. go 1.27 is out, and counterfeiter follows go's support policy, so 1.26 and 1.27 are the supported versions.

Where fakes can go

  • 🆕 A fake can be generated into the same package as its interface. Point -o at the package's own directory (-o ., or -o fake_foo_test.go so it is only compiled for tests) and the fake becomes a member of that package: no self-import, unqualified names, and the compile-time assertion stays, unexported interfaces included. Tests inside the package can use generated fakes without an import cycle. There is no new flag; detection is by directory, so fakes written anywhere else come out exactly as before. A stale same-package fake that no longer compiles does not stop you regenerating it. (#378, fixes #103, #121, #210, #262, and #68 from 2016)
  • 🆕 -test writes the fake into the external test package, <package>_test, as a _test.go file next to the tests that use it. It works for interfaces from other packages in your module, the standard library and third-party modules, so -test io.WriteCloser puts FakeWriteCloser in <package>_test, the package that tests <package>'s public API, and writes nothing anywhere else. @​nkovacs proposed and prototyped this in #135 in 2019. Thanks Nikola. (#383, fixes #135)
  • 🆕 The package clause of a fake follows whatever package already lives in the output directory, and is named after the directory only when there is nothing there yet. So fakes/ can hold package impl_fakes: add a doc.go declaring it and generate. Existing fakes packages are unaffected, their files already match the directory. (#384, fixes #249)
  • A fake of an unexported interface generated into its own package is unexported too: gadget gets fakeGadget, not FakeGadget. -fake-name is left alone. (#386)

Flags on the -generate line are defaults

  • 🆕 -o, -header, -q, -test and the new -fake-name-template given alongside -generate apply to every counterfeiter:generate directive in the package. A directive's own flags still win. -fake-name-template is a text/template over {{.TargetName}}, so -generate -o fake -fake-name-template '{{.TargetName}}' puts every fake in a fake package named after its interface, written once instead of -o and -fake-name on every line. This is @​matt-royal's design and fixture from #195, re-applied on the current tree. Thanks Matt. (#379, fixes #191)

⚡️ moar speed

  • Only the target package is type-checked from source now. Everything it imports is read from export data through the go build cache, instead of the whole dependency graph being type-checked on every run, stdlib included. On cloudfoundry/cli's actor/v7action (11 fakes) with a warm build cache:
    • one //go:generate line per fake: 4.7 seconds, was 11
    • the same package on a single -generate directive: 1.0 second, was 1.4, on a third of the CPU
    • a single fake on its own: 0.48 seconds, was 1.1
    • the repository benchmark: 130ms per uncached generate, was 600ms, allocating 7MB instead of 570MB

... (truncated)

Commits
  • 2692aee Merge pull request #394 from maxbrunsfeld/call-order
  • c400251 Merge pull request #393 from maxbrunsfeld/spec-style-import-test
  • 6f05184 record the order in which a fake's methods were called
  • bc037e8 write the import spec the way the rest of the generator specs are written
  • 3e30fb0 Merge pull request #392 from maxbrunsfeld/typed-args
  • 91ef39c expose a method's recorded arguments as a slice of structs
  • b05d734 ensure multiple coding harnesses can be used
  • 6ac3d93 add a guide for moving from gomock
  • fbce849 Merge pull request #391 from maxbrunsfeld/dependabot/go_modules/github.com/on...
  • a35112c Bump github.com/onsi/gomega from 1.43.0 to 1.43.1
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits
  • 3f62bf1 go.mod: update golang.org/x dependencies
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits
  • c624b89 google: change the snake case endpoint to kebab-case
  • 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits
  • fafe4a0 go.mod: update golang.org/x dependencies
  • f53c316 unicode/norm: don't truncate runes in the recomposition map key
  • 37867f6 unicode/norm: let any starter block composition in compose
  • 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
  • bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
  • 4f55186 unicode/norm: simplify short source detection in Form.transform
  • a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
  • cd1cbc9 unicode/bidi: panic rather than log.Panicf
  • a459614 internal/export/idna: fix conformance with optional validation disabled
  • be70a61 internal/export/idna: drop trie field from Profiles
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/dave/dst](https://github.com/dave/dst) | `0.27.4` | `0.28.0` |
| [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) | `6.12.2` | `6.14.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` |


Updates `github.com/dave/dst` from 0.27.4 to 0.28.0
- [Commits](dave/dst@v0.27.4...v0.28.0)

Updates `github.com/maxbrunsfeld/counterfeiter/v6` from 6.12.2 to 6.14.0
- [Release notes](https://github.com/maxbrunsfeld/counterfeiter/releases)
- [Commits](maxbrunsfeld/counterfeiter@v6.12.2...v6.14.0)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `golang.org/x/text` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/dave/dst
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/maxbrunsfeld/counterfeiter/v6
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/text
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file skip-release-notes Causes PR not to show in release notes labels Oct 1, 2026
@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

Hello dependabot[bot] 👋 Thank you for opening a Pull Request in eksctl project. The team will review the Pull Request and aim to respond within 1-10 business days. Meanwhile, please read about the Contribution and Code of Conduct guidelines here. You can find out more information about eksctl on our website

@github-actions github-actions Bot added the stale label Nov 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-minor-patch-afbf24ebe0 branch November 1, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file skip-release-notes Causes PR not to show in release notes stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants