Skip to content

chore(deps): bump the minor group with 3 updates#4016

Closed
dependabot[bot] wants to merge 2 commits intorelease-4.4from
dependabot/go_modules/release-4.4/minor-2c5b135f5f
Closed

chore(deps): bump the minor group with 3 updates#4016
dependabot[bot] wants to merge 2 commits intorelease-4.4from
dependabot/go_modules/release-4.4/minor-2c5b135f5f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the minor group with 3 updates: golang.org/x/sync, golang.org/x/sys and mvdan.cc/sh/v3.

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits
  • eaaaaee windows/registry: correct KeyInfo.ModTime calculation
  • 942780b cpu: darwin/arm64 feature detection
  • acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
  • 3687fbd cpu: better defaults on darwin ARM64
  • 48062e9 plan9: change Note to alias syscall.Note
  • 4f23f80 windows: change Signal to alias syscall.Signal
  • 7548802 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates mvdan.cc/sh/v3 from 3.12.0 to 3.13.0

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.13.0

This release introduces support for Zsh in the parser and formatter, which was tracked in issue #120 alongside the label https://github.com/mvdan/sh/labels/zsh. While support is not complete, it should be far enough for many use cases.

This release also drops support for Go 1.24 and includes many other enhancements:

  • cmd/shfmt
    • Exit with a non-zero status when -l prints any filenames
    • shfmt -version is now derived from the git current tag, dropping the -ldflags workaround
  • syntax
    • New nodes types and node fields are introduced alongside LangZsh
    • LangVariant is now a bitset, allowing the use of sets like "Bash-like"
    • Add InteractiveSeq and StmtsSeq iterator methods for Parser
    • Stop exposing the internal buffer in Printer via struct embedding
    • Support the use of brace expansions like declare {a,b}_c=value
    • Fix a bug where POSIX and Bash incorrectly allowed empty command lists
  • interp
    • Add support for shopt -s dotglob and shopt -s extglob
    • Add support for simple uses of !(expr) extended glob patterns
    • Support more builtin flags for declare, type, read
    • Fix various bugs relating to nulls, errors, and arrays
  • expand
    • Add Config.DotGlob and Config.ExtGlob for the interpreter
    • Add Variable.Flags to get the one-character declare flags
    • Do not force env vars on Windows to be uppercase
    • Fix various bugs relating to glob pattern matching
  • pattern
    • Add GlobLeadingDot and ExtendedOperators for the interpreter
    • Add NegExtGlobError to mark the use of !(expr) negation patterns

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.26.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

Changelog

Commits
  • 5c4d285 cmd/shfmt: bump Go and Alpine in the Dockerfile
  • 1ae455b update golang.org/x/sys
  • cb484d3 syntax: apply gopls warning suggestion
  • 64d9126 syntax: gofmt -w
  • 55d279f syntax: simplify zsh logic on left parentheses
  • 1cf3c19 syntax: support alternations in zsh test expressions
  • 0f0636e syntax: support parsing extended globs in zsh
  • a173247 syntax: parse and format zsh >! redirects as >|
  • d6bf6c9 syntax: rename ParamExp.Plus to IsSet
  • b612daa cmd/shfmt: simplify flag value code
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 9, 2026
@dtrudg
Copy link
Member

dtrudg commented Mar 11, 2026

@dependabot rebase

Bumps the minor group with 3 updates: [golang.org/x/sync](https://github.com/golang/sync), [golang.org/x/sys](https://github.com/golang/sys) and [mvdan.cc/sh/v3](https://github.com/mvdan/sh).


Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.13.0
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.13.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/release-4.4/minor-2c5b135f5f branch from 60cba63 to a54a9cc Compare March 11, 2026 09:52
@dtrudg
Copy link
Member

dtrudg commented Mar 11, 2026

Causes a test failure:

=== NAME  TestE2E/PAR/DOCKER/issue_274/exec
    regressions.go:175: failed to match "active environment : env" of type ContainMatch in output stream: command "/usr/local/bin/singularity exec /tmp/stest.3419381840/issue274-738784971/container conda info":
        Expect output stream contains:
        active environment : env
        Command output stream:
        
             active environment : None
               user config file : /home/circleci/.condarc
         populated config files : /opt/conda/.condarc
                                  /opt/conda/condarc.d/anaconda-auth.yml
                  conda version : 26.1.1
            conda-build version : not installed
                 python version : 3.13.12.final.0
                         solver : libmamba (default)
               virtual packages : __archspec=1=icelake
                                  __conda=26.1.1=0
                                  __glibc=2.41=0
                                  __linux=6.14.0=0
                                  __unix=0=0
               base environment : /opt/conda  (read only)
              conda av data dir : /opt/conda/etc/conda
          conda av metadata url : None
                   channel URLs : https://repo.anaconda.com/pkgs/main/linux-64
                                  https://repo.anaconda.com/pkgs/main/noarch
                                  https://repo.anaconda.com/pkgs/r/linux-64
                                  https://repo.anaconda.com/pkgs/r/noarch
                  package cache : /opt/conda/pkgs
                                  /home/circleci/.conda/pkgs
               envs directories : /home/circleci/.conda/envs
                                  /opt/conda/envs
            temporary directory : /tmp
                       platform : linux-64
                     user-agent : conda/26.1.1 requests/2.32.5 CPython/3.13.12 Linux/6.14.0-1012-aws debian/13.3 glibc/2.41 solver/libmamba conda-libmamba-solver/25.11.0 libmambapy/2.3.2 aau/0.7.5 c/. s/. e/.
                        UID:GID : 1001:1002
                     netrc file : None
                   offline mode : False
        
    regressions.go:175: failed to match "" of type ExactMatch in error stream: command "/usr/local/bin/singularity exec /tmp/stest.3419381840/issue274-738784971/container conda info":
        Expect error stream exact match:
        
        Command error stream:
        export: unimplemented builtin
        export: unimplemented builtin
        local: unimplemented builtin
        
        CondaError: Run 'conda init' before 'conda activate'

We have special handling in our interpreter code for
declarations (export, local, etc). From mvdan.cc/sh these declarations
are declared as built-ins (although annotated as being handled as
keywords by the parser.

Re-arrange the logic of internalExecHandler so the declarations
special case handling comes before the shellBuiltins handling.
@dtrudg
Copy link
Member

dtrudg commented Mar 11, 2026

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 11, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 11, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/release-4.4/minor-2c5b135f5f branch March 11, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant