From 643adbb61a8d93a4b8cc21a94dc2294718edcc90 Mon Sep 17 00:00:00 2001 From: "Gubrud, Aaron D" Date: Tue, 20 Oct 2026 14:39:40 -0700 Subject: [PATCH] chore(deps): bump github.com/xuri/excelize/v2 to 20261003002531 Bumps github.com/xuri/excelize/v2 from v2.11.1-0.20260915055537-22f76f9acb94 to v2.11.1-0.20261003002531-6258dcebc4e2, which also bumps the indirect dependency github.com/xuri/efp from v0.0.1 to v0.0.2. github.com/richardlehane/mscfb remains at v1.0.8, so the patched version excelize requires is retained. Note that this excelize revision raises its own minimum Go version from 1.25.0 to 1.26.0. PerfSpect already declares go 1.26.0 and the build container uses golang:1.27.2, so no toolchain change is needed. Verified: - amd64 and arm64 binaries build; no API changes in the surface used by internal/report/render_excel.go or cmd/benchmark/benchmark.go - all unit tests pass - gofmt, go vet, staticcheck and golangci-lint report no issues - generated a report with --format xlsx and confirmed the workbook is a valid archive with the expected sheets and cell values - govulncheck reports no vulnerabilities in excelize or its dependencies; vulnerabilities in imported packages drop from 17 to 14 Co-Authored-By: Claude Opus 5 --- go.mod | 4 ++-- go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index b8dac29f..ce3c72c4 100644 --- a/go.mod +++ b/go.mod @@ -23,7 +23,7 @@ require ( github.com/spf13/cobra v1.10.2 github.com/spf13/pflag v1.0.10 github.com/stretchr/testify v1.12.1 - github.com/xuri/excelize/v2 v2.11.1-0.20260915055537-22f76f9acb94 + github.com/xuri/excelize/v2 v2.11.1-0.20261003002531-6258dcebc4e2 golang.org/x/term v0.47.0 golang.org/x/text v0.43.0 gopkg.in/yaml.v2 v2.4.0 @@ -40,7 +40,7 @@ require ( github.com/richardlehane/mscfb v1.0.8 // indirect github.com/richardlehane/msoleps v1.0.6 // indirect github.com/tiendc/go-deepcopy v1.7.2 // indirect - github.com/xuri/efp v0.0.1 // indirect + github.com/xuri/efp v0.0.2 // indirect github.com/xuri/nfp v0.0.2-0.20250530014748-2ddeb826f9a9 // indirect go.mongodb.org/mongo-driver v1.17.7 // indirect go.yaml.in/yaml/v3 v3.0.5 // indirect diff --git a/go.sum b/go.sum index d840eec2..8edce4ab 100644 --- a/go.sum +++ b/go.sum @@ -43,10 +43,10 @@ github.com/stretchr/testify v1.12.1 h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWD github.com/stretchr/testify v1.12.1/go.mod h1:MDEgiDPPsNp5cuIrHPPCyornHKgEVbtFUmoNlxoYthg= github.com/tiendc/go-deepcopy v1.7.2 h1:Ut2yYR7W9tWjTQitganoIue4UGxZwCcJy3orjrrIj44= github.com/tiendc/go-deepcopy v1.7.2/go.mod h1:4bKjNC2r7boYOkD2IOuZpYjmlDdzjbpTRyCx+goBCJQ= -github.com/xuri/efp v0.0.1 h1:fws5Rv3myXyYni8uwj2qKjVaRP30PdjeYe2Y6FDsCL8= -github.com/xuri/efp v0.0.1/go.mod h1:ybY/Jr0T0GTCnYjKqmdwxyxn2BQf2RcQIIvex5QldPI= -github.com/xuri/excelize/v2 v2.11.1-0.20260915055537-22f76f9acb94 h1:yPdJeJLC1uTN8zQBHE2nqHjZ15PfxU9xsX75vNcyy/c= -github.com/xuri/excelize/v2 v2.11.1-0.20260915055537-22f76f9acb94/go.mod h1:WnwweQUkWv/3Y6OBVy0bgqN0zHAbn2N+i2zPUAXF1SI= +github.com/xuri/efp v0.0.2 h1:74yhBh0nfIWLOrN76wtShYVse94pADGYS0/c86jOp8Q= +github.com/xuri/efp v0.0.2/go.mod h1:ybY/Jr0T0GTCnYjKqmdwxyxn2BQf2RcQIIvex5QldPI= +github.com/xuri/excelize/v2 v2.11.1-0.20261003002531-6258dcebc4e2 h1:YJqtDi2ShO2fh/qMNO0MyPHXiki9h1OH3i3zGRunGRQ= +github.com/xuri/excelize/v2 v2.11.1-0.20261003002531-6258dcebc4e2/go.mod h1:d2KG/tW81cIhSeC3S7wENv3qRnOC3MDcrjDicKuZa6U= github.com/xuri/nfp v0.0.2-0.20250530014748-2ddeb826f9a9 h1:+C0TIdyyYmzadGaL/HBLbf3WdLgC29pgyhTjAT/0nuE= github.com/xuri/nfp v0.0.2-0.20250530014748-2ddeb826f9a9/go.mod h1:WwHg+CVyzlv/TX9xqBFXEZAuxOPxn2k1GNHwG41IIUQ= go.mongodb.org/mongo-driver v1.17.7 h1:a9w+U3Vt67eYzcfq3k/OAv284/uUUkL0uP75VE5rCOU=