chore: update go dependencies (2 updates) #233

Merged

Wuast94 merged 1 commit from updatarr/go-dependencies-c171078cda into main 2026-09-18 00:41:42 +02:00

Conversation 0 Commits 1 Files changed 2 +6 -6

Wuast94 commented 2026-09-14 04:52:11 +02:00

Owner

• Copy link
• Copy Markdown

Updates go dependencies.

Automerge: Enabled

Updates

Dependency	From	To	Type	Locations
github.com/fxamacker/cbor/v2	v2.9.3	v2.9.4	patch	[1] L20
sigs.k8s.io/controller-runtime	v0.25.0	v0.25.1	patch	[1] L10

Files

• [1] go.mod

Release notes

github.com/fxamacker/cbor/v2 (v2.9.3 → v2.9.4)

v2.9.4: v2.9.4

Compare source

Source

Source ref: release-2.9

This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions.

Not affected: user apps that don't register tag types and don't use map key types that are either named empty interfaces (e.g. type MyAny any) or contain interfaces.

These potential panics can be encountered when one of these two conditions is met:

• user application registers a tag type (via TagSet interface) that is an array or struct with uncomparable or interface{} element or field type, or
• user application specifies a destination Go map whose key type is a named empty interface type or a type containing an interface.

This was identified while improving tests and reviewing code for an upcoming release.

Tests and fuzz tests were extended to cover this bug.

Upgrading to v2.9.4 is recommended.

What's Changed

• Fix panic decoding uncomparable map keys under certain conditions by @fxamacker in https://github.com/fxamacker/cbor/pull/817

Full Changelog: https://github.com/fxamacker/cbor/compare/v2.9.3...v2.9.4

- sigs.k8s.io/controller-runtime (v0.25.0 → v0.25.1): No release notes available.

Updates `go dependencies`. Automerge: Enabled ### Updates | Dependency | From | To | Type | Locations | | --- | --- | --- | --- | --- | | <code>github.com/fxamacker/cbor/v2</code> | <code>v2.9.3</code> | <code>v2.9.4</code> | patch | [1] L20 | | <code>sigs.k8s.io/controller-runtime</code> | <code>v0.25.0</code> | <code>v0.25.1</code> | patch | [1] L10 | ### Files - [1] <code>go.mod</code> ### Release notes <details> <summary>github.com/fxamacker/cbor/v2 (v2.9.3 → v2.9.4)</summary> ### [`v2.9.4`](https://github.com/fxamacker/cbor/releases/tag/v2.9.4): v2.9.4 [Compare source](https://github.com/fxamacker/cbor/compare/v2.9.3...v2.9.4) [Source](https://github.com/fxamacker/cbor) Source ref: <code>release-2.9</code> This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions. Not affected: user apps that don't register tag types and don't use map key types that are either _named_ empty interfaces (e.g. `type MyAny any`) or contain interfaces. These potential panics can be encountered when one of these two conditions is met: - user application registers a tag type (via `TagSet` interface) that is an array or struct with uncomparable or `interface{}` element or field type, or - user application specifies a destination Go map whose key type is a named empty interface type or a type containing an interface. This was identified while improving tests and reviewing code for an upcoming release. Tests and fuzz tests were extended to cover this bug. Upgrading to v2.9.4 is recommended. ## What's Changed * Fix panic decoding uncomparable map keys under certain conditions by @fxamacker in https://github.com/fxamacker/cbor/pull/817 **Full Changelog**: https://github.com/fxamacker/cbor/compare/v2.9.3...v2.9.4 </details> - <code>sigs.k8s.io/controller-runtime (v0.25.0 → v0.25.1)</code>: No release notes available.

Wuast94 added 1 commit 2026-09-14 04:52:11 +02:00

chore: update go dependencies (v0.25.0 → v0.25.1) 17936ea748

Wuast94 scheduled this pull request to auto merge when all checks succeed 2026-09-14 04:52:13 +02:00

Wuast94 changed title from chore: update go dependencies (v0.25.0 → v0.25.1) to chore: update go dependencies (2 updates) 2026-09-15 05:24:35 +02:00

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from 17936ea748 to efe3a6b0c8 2026-09-15 05:24:35 +02:00 Compare

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from efe3a6b0c8 to 01b452009b 2026-09-17 15:25:09 +02:00 Compare

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from 01b452009b to b107d9550c 2026-09-17 17:42:24 +02:00 Compare

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from b107d9550c to 81bc990050 2026-09-17 19:38:53 +02:00 Compare

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from 81bc990050 to 8cb278a15a 2026-09-17 20:39:42 +02:00 Compare

Wuast94 added 1 commit 2026-09-17 21:14:52 +02:00

chore: update go.sum for controller-runtime and cbor 10cea88485

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from 10cea88485 to e3484f65e2 2026-09-17 21:19:35 +02:00 Compare

Wuast94 force-pushed updatarr/go-dependencies-c171078cda from e3484f65e2 to 66fa1e38a9 2026-09-18 00:17:16 +02:00 Compare

Wuast94 merged commit 7404a32a64 into main 2026-09-18 00:41:42 +02:00

Wuast94 deleted branch updatarr/go-dependencies-c171078cda 2026-09-18 00:41:43 +02:00

Wuast94 referenced this pull request from a commit 2026-09-18 00:41:44 +02:00

Merge pull request 'chore: update go dependencies (v0.25.0 → v0.25.1)' (#233) from updatarr/go-dependencies-c171078cda into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Wuast94/kumaste!233

No description provided.