chore(deps): update security updates by NumaryBot · Pull Request #132 · formancehq/fctl

NumaryBot · 2026-03-19T17:38:16Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/formancehq/cobra	replace	digest	`3a95027` -> `7f22399`
github.com/formancehq/formance-sdk-go/v3	require	minor	`v3.7.2` -> `v3.8.1`
github.com/go-chi/chi/v5	indirect	patch	`v5.2.4` -> `v5.2.5`
github.com/go-jose/go-jose/v4	require	minor	`v4.0.5` -> `v4.1.3`
github.com/gookit/color	indirect	minor	`v1.5.4` -> `v1.6.0`
github.com/mailru/easyjson	indirect	minor	`v0.7.7` -> `v0.9.2`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.16` -> `v0.0.21`
github.com/mattn/go-tty	indirect	patch	`v0.0.5` -> `v0.0.7`
github.com/pterm/pterm	require	patch	`v0.12.81` -> `v0.12.83`
github.com/sergi/go-diff	indirect	minor	`v1.3.1` -> `v1.4.0`
github.com/sirupsen/logrus	indirect	patch	`v1.9.3` -> `v1.9.4`
github.com/uptrace/bun	indirect	patch	`v1.2.15` -> `v1.2.18`
github.com/zitadel/oidc/v3	indirect	patch	`v3.45.0` -> `v3.45.5`
github.com/zitadel/schema	indirect	patch	`v1.3.1` -> `v1.3.2`
go.opentelemetry.io/auto/sdk	indirect	minor	`v1.1.0` -> `v1.2.1`
go.opentelemetry.io/otel	indirect	minor	`v1.38.0` -> `v1.42.0`
go.opentelemetry.io/otel/log	indirect	minor	`v0.6.0` -> `v0.18.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.38.0` -> `v1.42.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.38.0` -> `v1.42.0`
go.uber.org/zap	indirect	patch	`v1.27.0` -> `v1.27.1`
golang.org/x/crypto	indirect	minor	`v0.45.0` -> `v0.49.0`
golang.org/x/mod	require	minor	`v0.29.0` -> `v0.34.0`
golang.org/x/oauth2	require	minor	`v0.31.0` -> `v0.36.0`
golang.org/x/sync	indirect	minor	`v0.18.0` -> `v0.20.0`
golang.org/x/sys	indirect	minor	`v0.38.0` -> `v0.42.0`
golang.org/x/term	indirect	minor	`v0.37.0` -> `v0.41.0`
golang.org/x/text	indirect	minor	`v0.31.0` -> `v0.35.0`

Release Notes

formancehq/formance-sdk-go (github.com/formancehq/formance-sdk-go/v3)

`v3.8.1`: go - v3.8.1 - 2026-03-19 13:25:07

Compare Source

Generated by Speakeasy CLI

github.com/formancehq/formance-sdk-go 3.8.1

Go SDK Changes:

Formance.Ledger.V2.CountAccounts():
- request.Request.Query Added
Formance.Ledger.V2.CountTransactions():
- request.Request.Query Added
Formance.Ledger.V2.GetBalancesAggregated():
- request.Request.Query Added
Formance.Ledger.V2.GetVolumesWithBalances():
- request.Request.Query Added
Formance.Ledger.V2.ListAccounts():
- request.Request.Query Added
Formance.Ledger.V2.ListLedgers():
- request.Request.Query Added
Formance.Ledger.V2.ListLogs():
- request.Request.Query Added
Formance.Ledger.V2.ListTransactions():
- request.Request.Query Added
Formance.Payments.V3.ListAccounts():
- request.Request.Query Added
Formance.Payments.V3.ListBankAccounts():
- request.Request.Query Added
Formance.Payments.V3.ListConnectorSchedules():
- request.Request.Query Added
Formance.Payments.V3.ListConnectors():
- request.Request.Query Added
Formance.Payments.V3.ListPaymentInitiationAdjustments():
- request.Request.Query Added
Formance.Payments.V3.ListPaymentInitiationRelatedPayments():
- request.Request.Query Added
Formance.Payments.V3.ListPaymentInitiations():
- request.Request.Query Added
Formance.Payments.V3.ListPayments():
- request.Request.Query Added
Formance.Payments.V3.ListPools():
- request.Request.Query Added
Formance.Reconciliation.V1.ListPolicies():
- request.Request.Query Added
Formance.Reconciliation.V1.ListReconciliations():
- request.Request.Query Added

Generated with Speakeasy CLI 1.757.1

`v3.8.0`: go - v3.8.0 - 2026-03-16 16:03:34

Compare Source

Generated by Speakeasy CLI

github.com/formancehq/formance-sdk-go 3.8.0

Go SDK Changes:

Formance.Ledger.V2.ListAccounts():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response.Resource Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CreateTransaction():
- request.Request Changed
- response.Data.Template Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Auth.V1.ListClients(): response.Data[] Changed (Breaking ⚠️)
Formance.Auth.V1.ReadClient(): response.Data Changed (Breaking ⚠️)
Formance.Auth.V1.UpdateClient():
- request.Request.CreateClientRequest.Metadata.Map<string> Changed (Breaking ⚠️)
- response.Data Changed (Breaking ⚠️)
Formance.Payments.V3.ListPools():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response.Cursor.Data[] Changed
Formance.Payments.V3.ListPayments():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListPaymentServiceUsers():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListPaymentInitiations():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListPaymentInitiationRelatedPayments():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListPaymentInitiationAdjustments():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListConnectors():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListConnectorSchedules():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListBankAccounts():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V3.ListAccounts():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response.Cursor.Data[].Connector Added
Formance.Payments.V3.GetConnectorConfig(): response.Data Changed (Breaking ⚠️)
Formance.Payments.V1.PaymentslistAccounts():
- request.Request.RequestBody Removed (Breaking ⚠️)
Formance.Payments.V1.ListTransferInitiations(): response.Cursor.Data[].RelatedPayments[].Status Changed (Breaking ⚠️)
Formance.Payments.V1.GetTransferInitiation(): response.Data.RelatedPayments[].Status Changed (Breaking ⚠️)
Formance.Ledger.GetInfo():
- response.ErrorCode Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.GetMetrics(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.AddMetadataOnTransaction():
- request.Request.SchemaVersion Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.AddMetadataToAccount():
- request.Request.SchemaVersion Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CountAccounts():
- request.Request.RequestBody Removed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CountTransactions():
- request.Request.RequestBody Removed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ListLedgers():
- request.Request Changed (Breaking ⚠️)
- response.Cursor.Data[].DeletedAt Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CreateExporter(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CreateLedger(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.CreatePipeline(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ListExporters(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.DeleteAccountMetadata():
- response Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.DeleteExporter(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.DeleteLedgerMetadata(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.DeletePipeline(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.DeleteTransactionMetadata():
- response Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetAccount(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetBalancesAggregated():
- request.Request.RequestBody Removed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetExporterState(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetLedger():
- response.Data.DeletedAt Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetLedgerInfo(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetPipelineState(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetTransaction():
- response.Data.Template Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.GetVolumesWithBalances():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response.Resource Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ImportLogs(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Auth.V1.CreateSecret():
- request.Request.CreateSecretRequest.Metadata.Map<string> Changed (Breaking ⚠️)
- response.Data.Metadata.Map<string> Changed (Breaking ⚠️)
Formance.Auth.V1.CreateClient():
- request.Request.Metadata.Map<string> Changed (Breaking ⚠️)
- response.Data Changed (Breaking ⚠️)
Formance.Ledger.V2.CreateBulk():
- request.Request Changed
- response.ErrorCode Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ListLogs():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ListPipelines(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ListTransactions():
- request.Request.RequestBody Removed (Breaking ⚠️)
- response Changed
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ReadStats(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.ResetPipeline(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.RevertTransaction():
- request.Request Changed
- response.Data.Template Added
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.StartPipeline(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.StopPipeline(): error.ErrorCode Changed (Breaking ⚠️)
Formance.Ledger.V2.UpdateLedgerMetadata():
- response.ErrorCode Changed (Breaking ⚠️)
- error.ErrorCode Changed (Breaking ⚠️)
Formance.Payments.V1.GetPoolBalancesLatest(): response.Data Changed (Breaking ⚠️)
Formance.Payments.V1.CreateTransferInitiation(): response.Data.RelatedPayments[].Status Changed (Breaking ⚠️)
Formance.Payments.V3.GetPool(): response.Data Changed
Formance.Payments.V3.GetAccount(): response.Data.Connector Added
Formance.Payments.V3.UpdatePoolQuery(): Added
Formance.Payments.V1.CreatePool():
- request.Request Changed
- response.Data Changed
Formance.Payments.V3.ListPaymentServiceUserConnectionsFromConnectorId(): Added
Formance.Payments.V1.GetPool(): response.Data Changed
Formance.Payments.V1.GetPoolBalances(): response.Data.Balances[].RelatedAccounts Added
Formance.Payments.V3.DeletePaymentServiceUserConnectionFromConnectorId(): Added
Formance.Payments.V3.GetPaymentServiceUserLinkAttemptFromConnectorId(): Added
Formance.Payments.V1.ListPools(): response.Cursor.Data[] Changed
Formance.Payments.V3.ForwardPaymentServiceUserToProvider(): Added
Formance.Payments.V3.DeletePaymentServiceUserConnector(): Added
Formance.Payments.V3.CreateAccount(): response.Data.Connector Added
Formance.Payments.V3.ListPaymentServiceUserLinkAttemptsFromConnectorId(): Added
Formance.Payments.V3.UpdateLinkForPaymentServiceUserOnConnector(): Added
Formance.Payments.V3.CreatePool(): request.Request Changed
Formance.Payments.V3.GetPoolBalancesLatest(): response.Data[].RelatedAccounts Added
Formance.Payments.V3.GetPoolBalances(): response.Data[].RelatedAccounts Added
Formance.Payments.V3.ListPaymentServiceUserConnections(): Added
Formance.Payments.V3.InstallConnector():
- request.Request.V3InstallConnectorRequest Changed
Formance.Payments.V3.DeletePaymentServiceUser(): Added
Formance.Payments.V3.CreateLinkForPaymentServiceUser(): Added
Formance.Payments.V1.UpdatePoolQuery(): Added
Formance.Ledger.V2.UpdateExporter(): Added
Formance.Ledger.V2.RunQuery(): Added
Formance.Ledger.V2.RestoreBucket(): Added
Formance.Ledger.V2.ListSchemas(): Added
Formance.Ledger.V2.InsertSchema(): Added
Formance.Ledger.V2.GetSchema(): Added
Formance.Ledger.V2.DeleteBucket(): Added
Formance.Payments.V3.V3UpdateConnectorConfig():
- request.Request.V3InstallConnectorRequest Changed

Generated with Speakeasy CLI 1.755.1

go-chi/chi (github.com/go-chi/chi/v5)

`v5.2.5`

Compare Source

What's Changed

Bump minimum Go to 1.22 and use new features by @JRaspass in https://github.com/go-chi/chi/pull/1017
Refactor graceful shutdown example by @mikereid1 in https://github.com/go-chi/chi/pull/994
Refactor to use atomic type by @cuiweixie in https://github.com/go-chi/chi/pull/1019
update reverseMethodMap in RegisterMethod by @cixel in https://github.com/go-chi/chi/pull/1022
Update comment about min Go version by @JRaspass in https://github.com/go-chi/chi/pull/1023
middleware: harden RedirectSlashes handler by @pkieltyka in https://github.com/go-chi/chi/pull/1044
Fix(middleware): Prevent double handler invocation in RouteHeaders with empty router by @mahanadh in https://github.com/go-chi/chi/pull/1045

New Contributors

@mikereid1 made their first contribution in https://github.com/go-chi/chi/pull/994
@cuiweixie made their first contribution in https://github.com/go-chi/chi/pull/1019
@cixel made their first contribution in https://github.com/go-chi/chi/pull/1022
@mahanadh made their first contribution in https://github.com/go-chi/chi/pull/1045

Full Changelog: go-chi/chi@v5.2.3...v5.2.5

go-jose/go-jose (github.com/go-jose/go-jose/v4)

`v4.1.3`

Compare Source

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Remove Go 1.23 support by @mcpherrinm in https://github.com/go-jose/go-jose/pull/205
Reject JWS with an unprotected critical b64 header by @mcpherrinm in https://github.com/go-jose/go-jose/pull/210

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

`v4.1.2`

Compare Source

What's Changed

go-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.

Update go-jose documentation by @mcpherrinm in https://github.com/go-jose/go-jose/pull/198
Remove dependency on testify by @wardviaene in https://github.com/go-jose/go-jose/pull/197
Improve error message for invalid private keys by @ProjectMutilation in https://github.com/go-jose/go-jose/pull/195
JWK unsupported error when unmarshalling by @fprojetto in https://github.com/go-jose/go-jose/pull/191
Add JSONWebKey type to makeJWERecipient by @alvarolivie in https://github.com/go-jose/go-jose/pull/200
testutils/assert: remove True, Nil, NotNil by @jsha in https://github.com/go-jose/go-jose/pull/202

What's Changed

Document signatureAlgorithms argument by @tgeoghegan in https://github.com/go-jose/go-jose/pull/163
Add custom error for unsupported JWS signature algorithms by @beautifulentropy in https://github.com/go-jose/go-jose/pull/181
use stdlib pbkdf2 package on go 1.24 by @kruskall in https://github.com/go-jose/go-jose/pull/180
The minimum supported Go version is now 1.24

New Contributors

@kruskall made their first contribution in https://github.com/go-jose/go-jose/pull/180

Full Changelog: go-jose/go-jose@v4.0.5...v4.1.0

gookit/color (github.com/gookit/color)

`v1.6.0`

Compare Source

Change Log

Fixed

fix: fix slice init length (#97) gookit/color@d4a4cd9
fix: resolve color tag parsing issue in #52 (PR #98) gookit/color@bdf4489
Fix race condition in Theme.Tips method when called concurrently (#109) gookit/color@6de7584

Feature

✨ feat: add new convert func: HSVToRGB, RGBToHSV gookit/color@d95f213

Update

Optimize RenderCode performance with fast paths for string arguments (#110) gookit/color@e532935
🎨 up: Remove dependencies on stretchr/testify and use a lighter gookit/assert alternative. gookit/color@4ac4e07
👔 up: remove deprecated var isLikeInCmd, update some tests gookit/color@c5db0d0
👔 up: update detect env, use internal Level* instead of the terminfo.ColorLevel* gookit/color@173325a
🔥 chore: remove any.go, merge printer.go to quickstart.go gookit/color@f46f52e

Other

build(deps): bump WillAbides/setup-go-faster from 1.8.0 to 1.9.0 (#66) gookit/color@62dd3d2
build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#68) gookit/color@b79b464
build(deps): bump WillAbides/setup-go-faster from 1.9.0 to 1.9.1 (#69) gookit/color@ecb5570
build(deps): bump actions/checkout from 3 to 4 (#73) gookit/color@91529f0
build(deps): bump WillAbides/setup-go-faster from 1.9.1 to 1.10.1 (#71) gookit/color@3df6d41
build(deps): bump WillAbides/setup-go-faster from 1.10.1 to 1.11.0 (#74) gookit/color@8fa8954
build(deps): bump WillAbides/setup-go-faster from 1.11.0 to 1.12.0 (#75) gookit/color@9c0ef29
build(deps): bump golang.org/x/sys from 0.11.0 to 0.13.0 (#76) gookit/color@4af2bdd
build(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 (#77) gookit/color@44243ab
build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 (#78) gookit/color@72fbeaf
build(deps): bump WillAbides/setup-go-faster from 1.12.0 to 1.13.0 (#79) gookit/color@0c83bae
build(deps): bump github/codeql-action from 2 to 3 (#80) gookit/color@1bc67c4
build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (#81) gookit/color@23187d9
build(deps): bump WillAbides/setup-go-faster from 1.13.0 to 1.14.0 (#82) gookit/color@d7e962b
build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 (#83) gookit/color@f6fd20f
build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 (#86) gookit/color@18d84cb
build(deps): bump softprops/action-gh-release from 1 to 2 (#87) gookit/color@7e68fa7
build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 (#88) gookit/color@532f1f3
build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#89) gookit/color@c76538d
build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 (#90) gookit/color@7eaf97a
Update utils_test.go to allow running in read-only mode. (#91) gookit/color@fedc174
build(deps): bump golang.org/x/sys from 0.21.0 to 0.25.0 (#96) gookit/color@07ab70b
build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#85) gookit/color@4bcc6db
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#99) gookit/color@992eecf
build(deps): bump golang.org/x/sys from 0.25.0 to 0.30.0 (#100) gookit/color@90a1068
build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 (#101) gookit/color@860732e
📝 chore: add ci test on go1.21+, remove test on go1.18 gookit/color@5a49561
Add comprehensive GitHub Copilot instructions for gookit/color repository (#108) gookit/color@db128cf
⬆️ dep: upgrade actions and deps to latest version gookit/color@5eae38c
💚 ci: revert the go version to 1.18 on go.mod gookit/color@370e227
🎨 doc: update readme and format the.github/copilot-instructions.md gookit/color@c34c15e
📝 chore: update some code style and some tests gookit/color@f14a7b8
🎨 chore: update some go file code style gookit/color@cc45966
⬆️ dep: upgrade gookit/assert to v0.1.1, update some tests gookit/color@fa47891
✅ demo: update the examples deps and some codes gookit/color@0b1dc4c

New Contributors

@Hellseher made their first contribution in https://github.com/gookit/color/pull/91
@cuishuang made their first contribution in https://github.com/gookit/color/pull/97
@almas-x made their first contribution in https://github.com/gookit/color/pull/98
@Copilot made their first contribution in https://github.com/gookit/color/pull/108

Full Changelog: gookit/color@v1.5.4...v1.6.0

mailru/easyjson (github.com/mailru/easyjson)

`v0.9.2`

Compare Source

What's Changed

Bugfix: do not generate invalid JSON when float value is +Inf, -Inf or NaN by @dmitrybarsukov in https://github.com/mailru/easyjson/pull/421
fix null after MarshalText work by @AndreiBerezin in https://github.com/mailru/easyjson/pull/423
Support for json:",omitzero" tag by @nsd20463 in https://github.com/mailru/easyjson/pull/429

Full Changelog: mailru/easyjson@v0.9.1...v0.9.2

`v0.9.1`

Compare Source

What's Changed

Fix unmarshal null to existing value by @neal in https://github.com/mailru/easyjson/pull/407
Fix unmarshal null values for non-pointer fields by @neal in https://github.com/mailru/easyjson/pull/411
feat: Add version and commit information to easyjson generator by @stickpro in https://github.com/mailru/easyjson/pull/424

New Contributors

@neal made their first contribution in https://github.com/mailru/easyjson/pull/407
@stickpro made their first contribution in https://github.com/mailru/easyjson/pull/424

Full Changelog: mailru/easyjson@v0.9.0...v0.9.1

`v0.9.0`

Compare Source

up go version and bugfixes

`v0.8.0`

Compare Source

stable version before go version bump

mattn/go-runewidth (github.com/mattn/go-runewidth)

`v0.0.21`

Compare Source

`v0.0.20`

Compare Source

`v0.0.19`

Compare Source

`v0.0.18`

Compare Source

`v0.0.17`

Compare Source

mattn/go-tty (github.com/mattn/go-tty)

`v0.0.7`

Compare Source

`v0.0.6`

Compare Source

pterm/pterm (github.com/pterm/pterm)

`v0.12.83`

Compare Source

What's Changed

Fixes 🔧

fix(prefix): PrefixPrinter now uses updated defaultWriter by @christeredvartsen in https://github.com/pterm/pterm/pull/752
fix: reset IsActive before RawOutput early return in SpinnerPrinter.Stop() by @bk-simon in https://github.com/pterm/pterm/pull/764

New Contributors

@christeredvartsen made their first contribution in https://github.com/pterm/pterm/pull/752
@bk-simon made their first contribution in https://github.com/pterm/pterm/pull/764

Full Changelog: pterm/pterm@v0.12.82...v0.12.83

`v0.12.82`

Compare Source

What's Changed

Exciting New Features 🎉

feat(bigtext_printer): add ASCII art representation for "@" character by @MarvinJWendt in https://github.com/pterm/pterm/pull/744
feat(interactive_select): add filter input placeholder to multiselect and select printers by @MarvinJWendt in https://github.com/pterm/pterm/pull/745

Fixes 🔧

fix(spinner): remove extra newline on start by @lavocatt in https://github.com/pterm/pterm/pull/732
fix(print): enhance RemoveColorFromString to also strip OSC 8 hyperlinks by @MarvinJWendt in https://github.com/pterm/pterm/pull/746
fix(interactive_textinput): fixed gray text when using a default value by @MarvinJWendt in https://github.com/pterm/pterm/pull/747

Other Changes

Fix rounding factor panic by @MarvinJWendt in https://github.com/pterm/pterm/pull/722
Fix typo in default continue prompt comment by @MarvinJWendt in https://github.com/pterm/pterm/pull/724
Fix comment typo in SlogHandler by @MarvinJWendt in https://github.com/pterm/pterm/pull/723
Fix selectOption for invalid defaults by @MarvinJWendt in https://github.com/pterm/pterm/pull/725
Fix typos in comments by @MarvinJWendt in https://github.com/pterm/pterm/pull/726

New Contributors

@lavocatt made their first contribution in https://github.com/pterm/pterm/pull/732

Full Changelog: pterm/pterm@v0.12.81...v0.12.82

sergi/go-diff (github.com/sergi/go-diff)

`v1.4.0`

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.9.4`

Compare Source

Notable changes

go.mod: update minimum supported go version to v1.17 https://github.com/sirupsen/logrus/pull/1460
go.mod: bump up dependencies https://github.com/sirupsen/logrus/pull/1460
Touch-up godoc and add "doc" links.
README: fix links, grammar, and update examples.
Add GNU/Hurd support https://github.com/sirupsen/logrus/pull/1364
Add WASI wasip1 support https://github.com/sirupsen/logrus/pull/1388
Remove uses of deprecated ioutil package https://github.com/sirupsen/logrus/pull/1472
CI: update actions and golangci-lint https://github.com/sirupsen/logrus/pull/1459
CI: remove appveyor, add macOS https://github.com/sirupsen/logrus/pull/1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

uptrace/bun (github.com/uptrace/bun)

`v1.2.18`

Compare Source

Bug Fixes

handle []byte and [N]byte in Tuple, separate List from Tuple imp… (#1340) (bec98b9)
validate parenthesized content in ReadIdentifier to prevent ?(?, ?) misparse (#1338) (b8da15b), closes #1337

`v1.2.17`

Compare Source

Bug Fixes

handle []byte and [N]byte in Tuple, separate List from Tuple imp… (#1340) (bec98b9)
validate parenthesized content in ReadIdentifier to prevent ?(?, ?) misparse (#1338) (b8da15b), closes #1337

`v1.2.16`

Compare Source

Bug Fixes

migrator exec error propagation (#1320) (b40f603)
OrderAscNullsFirst mapping (fixes #1305) (43b6af2)
panic in indirectAsKey when loading complex models. TypeOf(v) returns nil (2788c5b)
RunMigration marks migration as applied after running (#1330) (990c2eb)

Features

add Tuple and List (#1331) (5c2b3d1)
create unique index on migration name column in Migrator.Init (#1332) (44ac056)
update: use DEFAULT instead of NULL on databases that support it (#1315) (cabcffd)

zitadel/oidc (github.com/zitadel/oidc/v3)

`v3.45.5`

Compare Source

Bug Fixes

add auth_methods client_secret_basic for refresh token and revok… (#803) (811e8b2)

`v3.45.4`

Compare Source

Bug Fixes

grant type in device code validation error message (#845) (c238329)

`v3.45.3`

Compare Source

Bug Fixes

tracing: renamed tracer in op (#809) (d105faf), closes #808

`v3.45.2`

Compare Source

Bug Fixes

consistently handle string-valued boolean fields from non-compliant OIDC providers (#791) (b4dca67), closes #139

`v3.45.1`

Compare Source

Bug Fixes

rp: don't ignore JWKS parsing errors (#771) (a3f3428), closes #541

zitadel/schema (github.com/zitadel/schema)

`v1.3.2`

Compare Source

Bug Fixes

add test (95c7b8f)
decode error message (1b632a9)
fix assertion test (595717f)
if default element type of value are setted in slice , raise error (9c25058)
indirection through nil pointer to embedded struct (#211) (c3913e4)
test data (2b94d1c)

open-telemetry/opentelemetry-go-instrumentation (go.opentelemetry.io/auto/sdk)

`v1.2.1`

Fixed

Fix uint32 bounding on 32 bit architectures in the go.opentelemetry.io/auto/sdk module. (#2810)
Fix go.opentelemetry.io/auto/examples/rolldice build. (#2894)

`v1.2.0`

[!NOTE]
This is the last release version that will support building the auto-instrumentation CLI using Go 1.23.
The next release will require development to be done using Go >= 1.24.

Added

Cache offsets for golang.org/x/net 0.42.0. (#2503)
Cache offsets for google.golang.org/grpc 1.74.2. (#2546)
Cache offsets for google.golang.org/grpc 1.76.0-dev. (#2596)
Allow configuration of the resource using a resource.Detector. (#2598)
- The WithResourceDetector function is added to go.opentelemetry.io/auto/pipeline/otelsdk.
- The WithEnv function is updated to parse the OTEL_RESOURCE_DETECTOR environment variable.
  Values are expected to be a comma-separated list of resource detector IDs registered with the [autodetect package][autodetect package].
Cache offsets for Go 1.23.12. (#2603)
Cache offsets for Go 1.24.6. (#2603)
Cache offsets for golang.org/x/net 0.43.0. (#2615)
Cache offsets for Go 1.25.0. (#2651)
Cache offsets for google.golang.org/grpc 1.75.0. (#2686)
Cache offsets for github.com/segmentio/kafka-go 0.4.49. (#2699)
Cache offsets for go.opentelemetry.io/otel v1.38.0. (#2726)
Cache offsets for Go 1.24.7. (#2747)
Cache offsets for Go 1.25.1. (#2747)
Cache offsets for golang.org/x/net 0.44.0. (#2773)
Cache offsets for google.golang.org/grpc 1.72.3. (#2787)
Cache offsets for google.golang.org/grpc 1.73.1. (#2787)
Cache offsets for google.golang.org/grpc 1.74.3. (#2787)
Cache offsets for google.golang.org/grpc 1.75.1. (#2787)

Changed

Upgrade go.opentelemetry.io/auto semconv to v1.37.0. (#2763)
Upgrade go.opentelemetry.io/auto/sdk semconv to v1.37.0. (#2763)

Fixed

Add telemetry.distro.version resource attribute to the otelsdk handler. (#2383)
active_spans_by_span_ptr eBPF map used in the traceglobal probe changed to LRU. (#2509)

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

`v1.42.0`: /v0.64.0/v0.18.0/v0.0.16

Compare Source

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package.
The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions.
See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)
Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)
Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)
Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

What's Changed

fix changelog protection marker by @pellared in https://github.com/open-telemetry/opentelemetry-go/pull/7986
Drop support for Go 1.24 by @MrAlias in https://github.com/open-telemetry/opentelemetry-go/pull/7984
fix(deps): update golang.org/x by [@&fix(deps): update security updates #82

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

NumaryBot · 2026-03-19T17:38:23Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: gopkg.in/go-jose/go-jose.v4@v4.1.3: parsing go.mod:
	module declares its path as: github.com/go-jose/go-jose/v4
	        but was required as: gopkg.in/go-jose/go-jose.v4

File name: undefined

Command failed: just pre-commit
go mod tidy
go: downloading github.com/c-bata/go-prompt v0.2.6
go: downloading github.com/formancehq/cobra v1.10.3-0.20260226173701-7f22399f993b
go: downloading github.com/formancehq/formance-sdk-go/v3 v3.8.1
go: downloading github.com/pterm/pterm v0.12.83
go: downloading github.com/iancoleman/strcase v0.3.0
go: downloading github.com/mattn/go-shellwords v1.0.12
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading golang.org/x/mod v0.34.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading github.com/TylerBrock/colorjson v0.0.0-20200706003622-8a50f05110d2
go: downloading github.com/go-jose/go-jose/v4 v4.1.3
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/segmentio/ksuid v1.0.4
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-runewidth v0.0.21
go: downloading github.com/mattn/go-tty v0.0.7
go: downloading golang.org/x/sys v0.42.0
go: downloading atomicgo.dev/cursor v0.2.0
go: downloading atomicgo.dev/keyboard v0.2.9
go: downloading atomicgo.dev/schedule v0.1.0
go: downloading github.com/gookit/color v1.6.0
go: downloading github.com/lithammer/fuzzysearch v1.1.8
go: downloading golang.org/x/term v0.41.0
go: downloading golang.org/x/text v0.35.0
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading github.com/fatih/color v1.18.0
go: downloading github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f
go: downloading github.com/pkg/term v1.2.0-beta.2
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/containerd/console v1.0.5
go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
go: downloading golang.org/x/sync v0.20.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: gopkg.in/go-jose/go-jose.v4@v4.1.3: parsing go.mod:
	module declares its path as: github.com/go-jose/go-jose/v4
	        but was required as: gopkg.in/go-jose/go-jose.v4
error: Recipe `tidy` failed on line 13 with exit code 1

coderabbitai · 2026-03-19T17:38:26Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

go.mod is excluded by !**/*.mod

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0f33fd70-32c4-4d3e-a39e-9a9e8d7edc9b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/security

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

NumaryBot requested a review from a team as a code owner March 19, 2026 17:38

NumaryBot added the security label Mar 19, 2026

NumaryBot enabled auto-merge (squash) March 19, 2026 17:38

NumaryBot requested a review from a team March 19, 2026 17:38

flemzord approved these changes Mar 19, 2026

View reviewed changes

auto-merge was automatically disabled March 19, 2026 17:45
Pull Request is not mergeable

flemzord previously approved these changes Mar 19, 2026

View reviewed changes

chore(deps): update security updates

023ce3c

NumaryBot enabled auto-merge (squash) March 20, 2026 02:56

NumaryBot dismissed flemzord’s stale review via 023ce3c March 20, 2026 02:56

NumaryBot force-pushed the renovate/security branch from c6a1638 to 023ce3c Compare March 20, 2026 02:56

NumaryBot requested a review from a team March 20, 2026 02:57

flemzord approved these changes Mar 20, 2026

View reviewed changes

NumaryBot merged commit 27c0515 into main Mar 20, 2026
3 of 5 checks passed

NumaryBot deleted the renovate/security branch March 20, 2026 06:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update security updates#132

chore(deps): update security updates#132
NumaryBot merged 1 commit intomainfrom
renovate/security

NumaryBot commented Mar 19, 2026 •

edited

Loading

Uh oh!

NumaryBot commented Mar 19, 2026 •

edited

Loading

Uh oh!

coderabbitai bot commented Mar 19, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

NumaryBot commented Mar 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.8.1: go - v3.8.1 - 2026-03-19 13:25:07

Generated by Speakeasy CLI

Go SDK Changes:

v3.8.0: go - v3.8.0 - 2026-03-16 16:03:34

Generated by Speakeasy CLI

Go SDK Changes:

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Change Log

Fixed

Feature

Update

Other

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

Fixes 🔧

New Contributors

What's Changed

Exciting New Features 🎉

Fixes 🔧

Other Changes

New Contributors

Notable changes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Fixed

Added

Changed

Fixed

v1.42.0: /v0.64.0/v0.18.0/v0.0.16

Added

Changed

Fixed

Removed

What's Changed

Configuration

Uh oh!

NumaryBot commented Mar 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

File name: undefined

Uh oh!

coderabbitai bot commented Mar 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

NumaryBot commented Mar 19, 2026 •

edited

Loading

`v3.8.1`: go - v3.8.1 - 2026-03-19 13:25:07

`v3.8.0`: go - v3.8.0 - 2026-03-16 16:03:34

`v1.42.0`: /v0.64.0/v0.18.0/v0.0.16

NumaryBot commented Mar 19, 2026 •

edited

Loading

coderabbitai bot commented Mar 19, 2026 •

edited

Loading