chore(deps): bump golang.org/x/image from 0.31.0 to 0.38.0 in /src - #5
chore(deps): bump golang.org/x/image from 0.31.0 to 0.38.0 in /src#5dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.31.0 to 0.38.0. - [Commits](golang/image@v0.31.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-version: 0.38.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Mention Blocks like a regular teammate with your question or request: @blocks review this pull request Run |
![kilo-code-bot[bot]](https://avatars.githubusercontent.com/in/2193792?s=60&v=4){kind=small}
|
|
||
| go 1.24.0 | ||
| go 1.25.0 | ||
|
|
There was a problem hiding this comment.
WARNING: Go version updated from 1.24 to 1.25 - verify compatibility with Go 1.25
Check if any deprecated features are used or if there are breaking changes in the new Go version that could affect this codebase.
| golang.org/x/image v0.31.0 | ||
| golang.org/x/image v0.38.0 | ||
| google.golang.org/protobuf v1.36.10 | ||
| ) |
There was a problem hiding this comment.
WARNING: golang.org/x/image updated from v0.31.0 to v0.38.0 - verify no breaking changes affect usage
This is a significant version jump (7 minor versions). Review the changelog for golang.org/x/image to ensure no breaking changes affect how this package is used in the codebase.
| golang.org/x/sys v0.36.0 // indirect | ||
| golang.org/x/text v0.29.0 // indirect | ||
| golang.org/x/text v0.35.0 // indirect | ||
| gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect |
There was a problem hiding this comment.
WARNING: golang.org/x/text updated from v0.29.0 to v0.35.0 - verify no breaking changes affect usage
This is a significant version jump (6 minor versions). Review the changelog for golang.org/x/text to ensure no breaking changes affect how this package is used in the codebase.
Code Review SummaryStatus: 3 Issues Found | Recommendation: Address before merge Overview
Issue Details (click to expand)WARNING
Check if any deprecated features are used or if there are breaking changes in the new Go version that could affect this codebase. | This is a significant version jump (7 minor versions). Review the changelog for golang.org/x/image to ensure no breaking changes affect how this package is used in the codebase. | This is a significant version jump (6 minor versions). Review the changelog for golang.org/x/text to ensure no breaking changes affect how this package is used in the codebase. | Files Reviewed (2 files)
|
Bumps golang.org/x/image from 0.31.0 to 0.38.0.
Commits
23ae9edtiff: cap buffer growth to prevent OOM from malicious IFD offsete589e60webp: allow VP8L + VP8X(with alpha)fe7d73dgo.mod: update golang.org/x dependenciese3d762ball: upgrade go directive to at least 1.25.0 [generated]833c6edgo.mod: update golang.org/x dependenciesbc7fe0bgo.mod: update golang.org/x dependenciesc53c97fgo.mod: update golang.org/x dependencies9032ff7all: eliminate vet diagnostics9c9d08cgo.mod: update golang.org/x dependencies742b1b7all: fix some commentsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.