Skip to content

Bump the gomod group across 1 directory with 2 updates#324

Merged
Nexucis merged 1 commit intomainfrom
dependabot/go_modules/gomod-32e850b13f
Feb 27, 2026
Merged

Bump the gomod group across 1 directory with 2 updates#324
Nexucis merged 1 commit intomainfrom
dependabot/go_modules/gomod-32e850b13f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 27, 2026

Bumps the gomod group with 2 updates in the / directory: github.com/flc1125/go-cron/v4 and github.com/labstack/echo/v4.

Updates github.com/flc1125/go-cron/v4 from 4.7.2 to 4.8.0

Release notes

Sourced from github.com/flc1125/go-cron/v4's releases.

v4.8.0

What's Changed

[!WARNING] Go Version Support

As of this release, support for Go 1.24 has been dropped. The minimum supported version is now Go 1.25, with additional support for Go 1.26.

... (truncated)

Commits
  • 369ec9e Release v4.8.0 (#824)
  • 7e06802 chore(deps): update module github.com/mirrexone/unqueryvet to v1.5.4 (#823)
  • 3d8acce chore(deps): update module github.com/mattn/go-runewidth to v0.0.20 (#822)
  • 56b2830 fix(deps): update golang.org/x to 3dfff04 (#813)
  • 1aa1290 chore(deps): update module github.com/godoc-lint/godoc-lint to v0.11.2 (#821)
  • 3da4aef fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.10.1 (#811)
  • 4f703d7 chore(deps): update module github.com/golangci/misspell to v0.8.0 (#807)
  • 95763a4 fix(deps): update module github.com/redis/go-redis/v9 to v9.18.0 (#819)
  • 619b751 chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.7.0 (#818)
  • ab9b1d2 chore(deps): update module github.com/kevinburke/ssh_config to v1.6.0 (#817)
  • Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.15.0 to 4.15.1

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

Changelog

v5.0.4 - 2026-02-15

Enhancements

v5.0.3 - 2026-02-06

Security

  • Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by @​shblue21.

This applies to cases when:

  • Windows is used as OS
  • middleware.StaticConfig.Filesystem is nil (default)
  • echo.Filesystem is has not been set explicitly (default)

Exposure is restricted to the active process working directory and its subfolders.

v5.0.2 - 2026-02-02

Security

  • Fix Static middleware with config.Browse=true lists all files/subfolders from config.Filesystem root and not starting from config.Root in labstack/echo#2887

v5.0.1 - 2026-01-28

v5.0.0 - 2026-01-18

Echo v5 is maintenance release with major breaking changes

  • Context is now struct instead of interface and we can add method to it in the future in minor versions.
  • Adds new Router interface for possible new routing implementations.
  • Drops old logging interface and uses moderm log/slog instead.

... (truncated)

Commits
  • 6f3a84a Merge pull request #2905 from aldas/v4_crsf_token_fallback
  • 24fa4d0 CSRF: support older token-based CSRF protection handler that want to render t...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 27, 2026
@Nexucis
Copy link
Member

Nexucis commented Feb 27, 2026

@dependabot rebase

Bumps the gomod group with 2 updates in the / directory: [github.com/flc1125/go-cron/v4](https://github.com/flc1125/go-cron) and [github.com/labstack/echo/v4](https://github.com/labstack/echo).


Updates `github.com/flc1125/go-cron/v4` from 4.7.2 to 4.8.0
- [Release notes](https://github.com/flc1125/go-cron/releases)
- [Commits](flc1125/go-cron@v4.7.2...v4.8.0)

Updates `github.com/labstack/echo/v4` from 4.15.0 to 4.15.1
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.15.0...v4.15.1)

---
updated-dependencies:
- dependency-name: github.com/flc1125/go-cron/v4
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomod-32e850b13f branch from 33fb2ec to 2f6dacc Compare February 27, 2026 10:19
@Nexucis Nexucis merged commit 44191dc into main Feb 27, 2026
6 checks passed
@Nexucis Nexucis deleted the dependabot/go_modules/gomod-32e850b13f branch February 27, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant