[PR #816] [CLOSED] Bump github.com/spf13/viper from 1.7.0 to 1.18.2 in /tools #876

Closed
opened 2026-03-02 06:10:15 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/hibiken/asynq/pull/816
Author: @dependabot[bot]
Created: 1/29/2024
Status: Closed

Base: masterHead: dependabot/go_modules/tools/github.com/spf13/viper-1.18.2


📝 Commits (1)

  • 49061c5 Bump github.com/spf13/viper from 1.7.0 to 1.18.2 in /tools

📊 Changes

2 files changed (+80 additions, -58 deletions)

View changed files

📝 tools/go.mod (+23 -19)
📝 tools/go.sum (+57 -39)

📄 Description

Bumps github.com/spf13/viper from 1.7.0 to 1.18.2.

Release notes

Sourced from github.com/spf13/viper's releases.

v1.18.2

tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.

This release fixes a regression that appears in rare circumstances when using Unmarshal or UnmarshalExact to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the viper_bind_struct build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

What's Changed

Bug Fixes 🐛

Full Changelog: https://github.com/spf13/viper/compare/v1.18.1...v1.18.2

v1.18.1

What's Changed

Bug Fixes 🐛

Full Changelog: https://github.com/spf13/viper/compare/v1.18.0...v1.18.1

v1.18.0

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

AutomaticEnv works with Unmarshal

Previously, environment variables that weren't bound manually or had no defaults could not be mapped by Unmarshal. (The problem is explained in details in this issue: #761)

#1429 introduced a solution that solves that issue.

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • ab3a50c fix!: hide struct binding behind a feature flag
  • 9154b90 build(deps): bump actions/setup-go from 4.1.0 to 5.0.0
  • 08e4a00 build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • fb6eb1e fix: merge missing struct keys inside UnmarshalExact
  • f5fcb4a chore: update crypt
  • f736363 fix isPathShadowedInFlatMap type cast bug (#1585)
  • 36a3868 Review changes
  • f0c4ccd fix: gocritic lint issues
  • 3a23b80 ci: enable test shuffle; fix tests
  • 73dfb94 feat: make Unmarshal work with AutomaticEnv
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/hibiken/asynq/pull/816 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 1/29/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/tools/github.com/spf13/viper-1.18.2` --- ### 📝 Commits (1) - [`49061c5`](https://github.com/hibiken/asynq/commit/49061c593fa1fda18f4a236e4a826f853dc08501) Bump github.com/spf13/viper from 1.7.0 to 1.18.2 in /tools ### 📊 Changes **2 files changed** (+80 additions, -58 deletions) <details> <summary>View changed files</summary> 📝 `tools/go.mod` (+23 -19) 📝 `tools/go.sum` (+57 -39) </details> ### 📄 Description Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.7.0 to 1.18.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/viper/releases">github.com/spf13/viper's releases</a>.</em></p> <blockquote> <h2>v1.18.2</h2> <p><strong>tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.</strong></p> <p>This release fixes a regression that appears in rare circumstances when using <code>Unmarshal</code> or <code>UnmarshalExact</code> to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.</p> <p>The feature is now disabled by default and can be enabled using the <code>viper_bind_struct</code> build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.</p> <h2>What's Changed</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>feat!: hide struct binding behind a feature flag by <a href="https://github.com/sagikazarmark"><code>@​sagikazarmark</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1715">spf13/viper#1715</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/viper/compare/v1.18.1...v1.18.2">https://github.com/spf13/viper/compare/v1.18.1...v1.18.2</a></p> <h2>v1.18.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Bug Fixes 🐛</h3> <ul> <li>Merge missing struct keys inside UnmarshalExact by <a href="https://github.com/krakowski"><code>@​krakowski</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1704">spf13/viper#1704</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/viper/compare/v1.18.0...v1.18.1">https://github.com/spf13/viper/compare/v1.18.0...v1.18.1</a></p> <h2>v1.18.0</h2> <h2>Major changes</h2> <p>Highlighting some of the changes for better visibility.</p> <p>Please share your feedback in the Discussion forum. Thanks! ❤️</p> <h3><code>AutomaticEnv</code> works with <code>Unmarshal</code></h3> <p>Previously, environment variables that weren't bound manually or had no defaults could not be mapped by <code>Unmarshal</code>. (The problem is explained in details in this issue: <a href="https://redirect.github.com/spf13/viper/issues/761">#761</a>)</p> <p><a href="https://redirect.github.com/spf13/viper/issues/1429">#1429</a> introduced a solution that solves that issue.</p> <h2>What's Changed</h2> <h3>Enhancements 🚀</h3> <ul> <li>chore: rename files according to enabled build tags by <a href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1642">spf13/viper#1642</a></li> <li>test: replace ifs with asserts to simplify tests by <a href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1656">spf13/viper#1656</a></li> <li>ci: enable test shuffle and fix tests by <a href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1643">spf13/viper#1643</a></li> <li>fix: gocritic lint issues by <a href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1696">spf13/viper#1696</a></li> </ul> <h3>Bug Fixes 🐛</h3> <ul> <li>Implement viper.BindStruct for automatic unmarshalling from environment variables by <a href="https://github.com/krakowski"><code>@​krakowski</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1429">spf13/viper#1429</a></li> <li>fix isPathShadowedInFlatMap type cast bug by <a href="https://github.com/linuxsong"><code>@​linuxsong</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1585">spf13/viper#1585</a></li> </ul> <h3>Dependency Updates ⬆️</h3> <ul> <li>build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1661">spf13/viper#1661</a></li> <li>build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/spf13/viper/pull/1659">spf13/viper#1659</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/viper/commit/ab3a50c0ce2020028f8cb515c62fc4d2d97a8996"><code>ab3a50c</code></a> fix!: hide struct binding behind a feature flag</li> <li><a href="https://github.com/spf13/viper/commit/9154b900c34ad9d88897f7e5288ce43f457f698b"><code>9154b90</code></a> build(deps): bump actions/setup-go from 4.1.0 to 5.0.0</li> <li><a href="https://github.com/spf13/viper/commit/08e4a009491f5fdcd8f2d2d1ee0c4a96d3e4973d"><code>08e4a00</code></a> build(deps): bump github/codeql-action from 2.22.8 to 2.22.9</li> <li><a href="https://github.com/spf13/viper/commit/fb6eb1e8e9fbaa424b113248af35f048c5d86dea"><code>fb6eb1e</code></a> fix: merge missing struct keys inside UnmarshalExact</li> <li><a href="https://github.com/spf13/viper/commit/f5fcb4a104f76357c270c3944c26a2e2c8a06fdf"><code>f5fcb4a</code></a> chore: update crypt</li> <li><a href="https://github.com/spf13/viper/commit/f7363633d1c17fd98cd70783fabc133c41d3f40e"><code>f736363</code></a> fix isPathShadowedInFlatMap type cast bug (<a href="https://redirect.github.com/spf13/viper/issues/1585">#1585</a>)</li> <li><a href="https://github.com/spf13/viper/commit/36a38682ba4fe1bb823952e52c461c297bb1767e"><code>36a3868</code></a> Review changes</li> <li><a href="https://github.com/spf13/viper/commit/f0c4ccd6cd7527b198aecc6d50b3ffd6d06e36d1"><code>f0c4ccd</code></a> fix: gocritic lint issues</li> <li><a href="https://github.com/spf13/viper/commit/3a23b80b1120cd3e6aaf21d91784fce81b8054df"><code>3a23b80</code></a> ci: enable test shuffle; fix tests</li> <li><a href="https://github.com/spf13/viper/commit/73dfb94c57ad48bcdf3d40b7f47d69c2962d800d"><code>73dfb94</code></a> feat: make Unmarshal work with AutomaticEnv</li> <li>Additional commits viewable in <a href="https://github.com/spf13/viper/compare/v1.7.0...v1.18.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/viper&package-manager=go_modules&previous-version=1.7.0&new-version=1.18.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-02 06:10:15 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/asynq#876
No description provided.