[PR #2011] [MERGED] build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 #2230

Closed
opened 2026-03-01 21:54:33 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/2011
Author: @dependabot[bot]
Created: 9/18/2023
Status: Merged
Merged: 9/18/2023
Merged by: @mergify[bot]

Base: masterHead: dependabot/go_modules/github.com/go-git/go-git/v5-5.9.0


📝 Commits (2)

  • 22af7d7 build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0
  • 4bc7bfb Merge branch 'master' into dependabot/go_modules/github.com/go-git/go-git/v5-5.9.0

📊 Changes

2 files changed (+16 additions, -16 deletions)

View changed files

📝 go.mod (+5 -5)
📝 go.sum (+11 -11)

📄 Description

Bumps github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0.

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.9.0

What's Changed

New Contributors

Full Changelog: https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0

Commits
  • e24e0f7 *: Bump go-billy to v5.5.0
  • ff0bd08 Merge pull request #837 from pjbgf/bump
  • cbbeb49 *: Bump to Go 1.19
  • cf3a75c *: Bump dependencies
  • 51e9c9f Merge pull request #835 from matejrisek/feature/do-not-swallow-vcs-host-errors
  • 5ad72db plumbing: Do not swallow http message coming from VCS providers.
  • 0377d06 Merge pull request #821 from daolis/bug/resetfix
  • 753b0d5 git: worktree, reset ignored files that are part of the worktree: Fixes #819
  • cd3a21c Merge pull request #832 from svghadi/CVE-2023-37788
  • f71a449 *: Bump goproxy dep. Fixes #826
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/2011 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 9/18/2023 **Status:** ✅ Merged **Merged:** 9/18/2023 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/go-git/go-git/v5-5.9.0` --- ### 📝 Commits (2) - [`22af7d7`](https://github.com/nektos/act/commit/22af7d77356de178c7a9790cd3878a24a873dec0) build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 - [`4bc7bfb`](https://github.com/nektos/act/commit/4bc7bfb8b2423f85e0b50aac569481e3273f79dd) Merge branch 'master' into dependabot/go_modules/github.com/go-git/go-git/v5-5.9.0 ### 📊 Changes **2 files changed** (+16 additions, -16 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+5 -5) 📝 `go.sum` (+11 -11) </details> ### 📄 Description Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.8.1 to 5.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.9.0</h2> <h2>What's Changed</h2> <ul> <li>git: worktree: add Amend option to CommitOptions by <a href="https://github.com/john-cai"><code>@​john-cai</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/438">go-git/go-git#438</a></li> <li>git: worktree, reset ignored files that are part of the worktree: Fixes <a href="https://redirect.github.com/go-git/go-git/issues/819">#819</a> by <a href="https://github.com/daolis"><code>@​daolis</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/821">go-git/go-git#821</a></li> <li>plumbing: Do not swallow http message coming from VCS providers by <a href="https://github.com/matejrisek"><code>@​matejrisek</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/835">go-git/go-git#835</a></li> <li>plumbing: transport, handle IPv6 while parsing endpoint. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/740">#740</a> by <a href="https://github.com/ninedraft"><code>@​ninedraft</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/820">go-git/go-git#820</a></li> <li>*: update goproxy dependency to fix CVE-2023-37788 vulnerability by <a href="https://github.com/svghadi"><code>@​svghadi</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/832">go-git/go-git#832</a></li> <li>*: bump dependencies and Go to 1.19 by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/837">go-git/go-git#837</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/svghadi"><code>@​svghadi</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/832">go-git/go-git#832</a></li> <li><a href="https://github.com/daolis"><code>@​daolis</code></a> made their first contribution in <a href="https://redirect.github.com/go-git/go-git/pull/821">go-git/go-git#821</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0">https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/e24e0f714c4ecaf086b5783f099a885e6a2c9a1a"><code>e24e0f7</code></a> *: Bump go-billy to v5.5.0</li> <li><a href="https://github.com/go-git/go-git/commit/ff0bd080629dd20662293b21703975aa9bcd74c6"><code>ff0bd08</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/837">#837</a> from pjbgf/bump</li> <li><a href="https://github.com/go-git/go-git/commit/cbbeb495ae1cd9d75190160ad73ad1e1256e0d96"><code>cbbeb49</code></a> *: Bump to Go 1.19</li> <li><a href="https://github.com/go-git/go-git/commit/cf3a75c4233dc5694a209a336daf71b8171f1013"><code>cf3a75c</code></a> *: Bump dependencies</li> <li><a href="https://github.com/go-git/go-git/commit/51e9c9f1d9261568573a8b4bd50e8694e14839f7"><code>51e9c9f</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/835">#835</a> from matejrisek/feature/do-not-swallow-vcs-host-errors</li> <li><a href="https://github.com/go-git/go-git/commit/5ad72db3bd60351da9ab42727952654e3ad5bcb2"><code>5ad72db</code></a> plumbing: Do not swallow http message coming from VCS providers.</li> <li><a href="https://github.com/go-git/go-git/commit/0377d0627fa4e32a576634f441e72153807e395a"><code>0377d06</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/821">#821</a> from daolis/bug/resetfix</li> <li><a href="https://github.com/go-git/go-git/commit/753b0d5cef6d8ef27c35de884b3c1673a33d1916"><code>753b0d5</code></a> git: worktree, reset ignored files that are part of the worktree: Fixes <a href="https://redirect.github.com/go-git/go-git/issues/819">#819</a></li> <li><a href="https://github.com/go-git/go-git/commit/cd3a21c619126288123c32f4a714181f9e1a68f8"><code>cd3a21c</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/832">#832</a> from svghadi/CVE-2023-37788</li> <li><a href="https://github.com/go-git/go-git/commit/f71a44910a6ff0353bb5584083f03bdd2b0aa395"><code>f71a449</code></a> *: Bump goproxy dep. Fixes <a href="https://redirect.github.com/go-git/go-git/issues/826">#826</a></li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.8.1&new-version=5.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:54:33 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#2230
No description provided.