[PR #805] [CLOSED] build(deps): bump github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2 #1621

Closed
opened 2026-03-01 21:51:57 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/805
Author: @dependabot[bot]
Created: 9/8/2021
Status: Closed

Base: masterHead: dependabot/go_modules/github.com/go-git/go-git/v5-5.4.2


📝 Commits (1)

  • 4791901 build(deps): bump github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2

📊 Changes

2 files changed (+31 additions, -26 deletions)

View changed files

📝 go.mod (+1 -5)
📝 go.sum (+30 -21)

📄 Description

Bumps github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2.

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.4.2

Change Log

  • Revert "plumbing: format/packfile, prevent large objects from being read into memory completely (#303) (da81027)

v5.4.1

Change Log

  • remote: patch default timeout for List from 600ms to 10s (#321)

v5.4.0

Change Log

  • Repository: test, use raw string to avoid double-escape #288 (jeffwidman)
  • Remote: new ListContext function #278 (xiujuan95)
  • Remote: add support for deepening shallow clones #311 (marwatk)
  • Submodele, fetch submodules pointing to orphaned but still reachable commits #284 (edigaryev)
  • plumbing: object/patch, printStat strings.Repeat cause panic #310 (cookeem)
  • plumbing: format/packfile, prevent large objects from being read into memory completely #303 (zeripath)
  • plumbing: transport/ssh, support more formats in NewPublicKeys SSH helper #298 (hiddeco)
  • *: replace golang.org/x/crypto/openpgp by github.com/ProtonMail/go-crypto/openpgp #283 (johanfleury)
  • *: typo fixes #291 (jeffwidman)
  • *: minor doc fixes #287 (jeffwidman)
  • *: remove unused unexported const #286 (jeffwidman)

v5.3.0

Change Log

  • transport: ssh, fix cloning large repositories #272 (dcu)
  • diff: Allow srcPrefix and dstPrefix to be configured #265 (yabberyabber)
  • Remote: add RequireRemoteRefs to PushOptions #258 (asuffield)
  • plumbing: gitignore, Fix gitconfig path in LoadSystemPatterns doc #256 (andrewarchi)
  • plumbing: wire up contexts for Transport.AdvertisedReferences #246 (asuffield)
  • worktree: Don't remove root directory when cleaning #230 (hansmi)
  • *: add insecureSkipTLS and cabundle #228 (StrongMonkey)
  • git: worktree_commit, just store objects not already stored #224 (jsteuer)
  • plumbing: packp: adding "object-format" and "filter" capabilities #222 (rofc)
  • Submodule: fix relative submodule resolution #195 (adracus)
  • git: worktree, Support relative submodule URL. #184 (mikyk10)
  • config: add init.defaultBranch to the config #178 (tomlazar)
  • config: support insteadOf for remotes' URLs #79 (kostyay)
Commits
  • da81027 Revert "plumbing: format/packfile, prevent large objects from being read into...
  • db4233e remote: patch default timeout for List (#321)
  • 720c192 plumbing: format/packfile, prevent large objects from being read into memory ...
  • e6e2339 plumbing: object/patch, printStat strings.Repeat cause panic (#310)
  • 320db9a git: Add support for deepening shallow clones (#311)
  • db2bc57 plumbing: transport/http, skip flaky test
  • c12f5b6 go modules: update go-git-fixtures
  • 01df753 *: use go-billy instead of os calls
  • 67af9d7 utils: ioutil, Pipe implementatio
  • c69d533 plumbing: format, use os.UserHomeDir()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/805 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 9/8/2021 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/go-git/go-git/v5-5.4.2` --- ### 📝 Commits (1) - [`4791901`](https://github.com/nektos/act/commit/4791901f91846c3ade0171651cc84dba9ba7cc7e) build(deps): bump github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2 ### 📊 Changes **2 files changed** (+31 additions, -26 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -5) 📝 `go.sum` (+30 -21) </details> ### 📄 Description Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.2.0 to 5.4.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.4.2</h2> <h2>Change Log</h2> <ul> <li>Revert &quot;plumbing: format/packfile, prevent large objects from being read into memory completely (<a href="https://github-redirect.dependabot.com/go-git/go-git/issues/303">#303</a>) (da81027)</li> </ul> <h2>v5.4.1</h2> <h2>Change Log</h2> <ul> <li>remote: patch default timeout for List from 600ms to 10s (<a href="https://github-redirect.dependabot.com/go-git/go-git/issues/321">#321</a>)</li> </ul> <h2>v5.4.0</h2> <h2>Change Log</h2> <ul> <li>Repository: test, use raw string to avoid double-escape <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/288">#288</a> (<a href="https://github.com/jeffwidman">jeffwidman</a>)</li> <li>Remote: new ListContext function <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/278">#278</a> (<a href="https://github.com/xiujuan95">xiujuan95</a>)</li> <li>Remote: add support for deepening shallow clones <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/311">#311</a> (<a href="https://github.com/marwatk">marwatk</a>)</li> <li>Submodele, fetch submodules pointing to orphaned but still reachable commits <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/284">#284</a> (<a href="https://github.com/edigaryev">edigaryev</a>)</li> <li>plumbing: object/patch, printStat strings.Repeat cause panic <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/310">#310</a> (<a href="https://github.com/cookeem">cookeem</a>)</li> <li>plumbing: format/packfile, prevent large objects from being read into memory completely <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/303">#303</a> (<a href="https://github.com/zeripath">zeripath</a>)</li> <li>plumbing: transport/ssh, support more formats in <code>NewPublicKeys</code> SSH helper <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/298">#298</a> (<a href="https://github.com/hiddeco">hiddeco</a>)</li> <li>*: replace golang.org/x/crypto/openpgp by github.com/ProtonMail/go-crypto/openpgp <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/283">#283</a> (<a href="https://github.com/johanfleury">johanfleury</a>)</li> <li>*: typo fixes <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/291">#291</a> (<a href="https://github.com/jeffwidman">jeffwidman</a>)</li> <li>*: minor doc fixes <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/287">#287</a> (<a href="https://github.com/jeffwidman">jeffwidman</a>)</li> <li>*: remove unused unexported const <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/286">#286</a> (<a href="https://github.com/jeffwidman">jeffwidman</a>)</li> </ul> <h2>v5.3.0</h2> <h2>Change Log</h2> <ul> <li>transport: ssh, fix cloning large repositories <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/272">#272</a> (<a href="https://github.com/dcu">dcu</a>)</li> <li>diff: Allow srcPrefix and dstPrefix to be configured <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/265">#265</a> (<a href="https://github.com/yabberyabber">yabberyabber</a>)</li> <li>Remote: add RequireRemoteRefs to PushOptions <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/258">#258</a> (<a href="https://github.com/asuffield">asuffield</a>)</li> <li>plumbing: gitignore, Fix gitconfig path in LoadSystemPatterns doc <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/256">#256</a> (<a href="https://github.com/andrewarchi">andrewarchi</a>)</li> <li>plumbing: wire up contexts for Transport.AdvertisedReferences <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/246">#246</a> (<a href="https://github.com/asuffield">asuffield</a>)</li> <li>worktree: Don't remove root directory when cleaning <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/230">#230</a> (<a href="https://github.com/hansmi">hansmi</a>)</li> <li>*: add insecureSkipTLS and cabundle <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/228">#228</a> (<a href="https://github.com/StrongMonkey">StrongMonkey</a>)</li> <li>git: worktree_commit, just store objects not already stored <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/224">#224</a> (<a href="https://github.com/jsteuer">jsteuer</a>)</li> <li>plumbing: packp: adding &quot;object-format&quot; and &quot;filter&quot; capabilities <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/222">#222</a> (<a href="https://github.com/rofc">rofc</a>)</li> <li>Submodule: fix relative submodule resolution <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/195">#195</a> (<a href="https://github.com/adracus">adracus</a>)</li> <li>git: worktree, Support relative submodule URL. <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/184">#184</a> (<a href="https://github.com/mikyk10">mikyk10</a>)</li> <li>config: add init.defaultBranch to the config <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/178">#178</a> (<a href="https://github.com/tomlazar">tomlazar</a>)</li> <li>config: support insteadOf for remotes' URLs <a href="https://github-redirect.dependabot.com/go-git/go-git/pull/79">#79</a> (<a href="https://github.com/kostyay">kostyay</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/da810275bf682d29a530ed819aff175f47bd7634"><code>da81027</code></a> Revert &quot;plumbing: format/packfile, prevent large objects from being read into...</li> <li><a href="https://github.com/go-git/go-git/commit/db4233e9e8b3b2e37259ed4e7952faaed16218b9"><code>db4233e</code></a> remote: patch default timeout for <code>List</code> (<a href="https://github-redirect.dependabot.com/go-git/go-git/issues/321">#321</a>)</li> <li><a href="https://github.com/go-git/go-git/commit/720c192831a890d0a36b4c6720b60411fa4a0159"><code>720c192</code></a> plumbing: format/packfile, prevent large objects from being read into memory ...</li> <li><a href="https://github.com/go-git/go-git/commit/e6e23391e4d044cc85e09b4420a2533715e7312d"><code>e6e2339</code></a> plumbing: object/patch, printStat strings.Repeat cause panic (<a href="https://github-redirect.dependabot.com/go-git/go-git/issues/310">#310</a>)</li> <li><a href="https://github.com/go-git/go-git/commit/320db9af8ba8b0046e833013504eb07c61a3573c"><code>320db9a</code></a> git: Add support for deepening shallow clones (<a href="https://github-redirect.dependabot.com/go-git/go-git/issues/311">#311</a>)</li> <li><a href="https://github.com/go-git/go-git/commit/db2bc57350561c4368a8d32c42476699b48d2a09"><code>db2bc57</code></a> plumbing: transport/http, skip flaky test</li> <li><a href="https://github.com/go-git/go-git/commit/c12f5b690a25ab654fb56bf7f9318470acd6eeaa"><code>c12f5b6</code></a> go modules: update go-git-fixtures</li> <li><a href="https://github.com/go-git/go-git/commit/01df7536992af375a54bbedf45369a475953e372"><code>01df753</code></a> *: use go-billy instead of os calls</li> <li><a href="https://github.com/go-git/go-git/commit/67af9d7223b0cc643025d958c592291f7475ac75"><code>67af9d7</code></a> utils: ioutil, Pipe implementatio</li> <li><a href="https://github.com/go-git/go-git/commit/c69d5331743e49d3672897cf1c552e5e123d4509"><code>c69d533</code></a> plumbing: format, use os.UserHomeDir()</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.2.0...v5.4.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.2.0&new-version=5.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:51:57 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#1621
No description provided.