Skip to content
This repository was archived by the owner on May 6, 2025. It is now read-only.

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2025

Bumps github.com/BurntSushi/toml from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.5.0

Mostly some small bugfixes, with a few small new features:

  • Add Position.Col, to mark the column an error occurred (#410)

  • Print more detailed errors in the tomlv CLI.

  • Ensure ParseError.Message is always set (#411)

  • Allow custom string types as map keys (#414)

  • Mark meta keys as decoded when using Unmarshaler interface (#426)

  • Fix encoding when nested inline table ends with map (#438)

  • Fix encoding of several layers of embedded structs (#430)

  • Fix ErrorWithPosition panic when there is no newline in the TOML document (#433)

Commits
  • d97def5 Update toml-test
  • d10101f Correct encoding of comma when nested inline table ends with map
  • 75a4f17 Correct encoding of several layers of embedded structs
  • 702f5a6 Minor staticcheck fixes
  • 6f7689d Mark meta keys as decoded when using Unmarshaler interface (#426)
  • 8323983 Remove exception for fuzzer
  • 4664468 Fix ErrorWithPosition panic when less than two lines
  • 211c915 Fix typos in comments, tests, error message (#432)
  • c141a29 Test with Go 1.24 in CI
  • 2918ee7 Fix metadata: do not reuse result of append (#418)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 24, 2025
@ghost
Copy link

ghost commented Mar 24, 2025

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 215748ff:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant