Skip to content

chore(deps): bump the golang group with 7 updates#660

Merged
s0up4200 merged 1 commit intomainfrom
dependabot/go_modules/golang-ffcf4276d6
Dec 3, 2025
Merged

chore(deps): bump the golang group with 7 updates#660
s0up4200 merged 1 commit intomainfrom
dependabot/go_modules/golang-ffcf4276d6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the golang group with 7 updates:

Package From To
github.com/autobrr/autobrr 1.68.0 1.70.0
github.com/coreos/go-oidc/v3 3.16.0 3.17.0
github.com/hashicorp/go-version 1.7.0 1.8.0
github.com/klauspost/compress 1.18.0 1.18.2
golang.org/x/image 0.32.0 0.33.0
golang.org/x/oauth2 0.32.0 0.33.0
modernc.org/sqlite 1.40.0 1.40.1

Updates github.com/autobrr/autobrr from 1.68.0 to 1.70.0

Release notes

Sourced from github.com/autobrr/autobrr's releases.

v1.70.0

Changelog

New Features

  • fecb1dd4374144c5d118bd36f7bacaddcc5525c3: feat(database): SQLite improvements (#2266) (@​zze0s)
  • 12f576577ed4c431ae29ee3e9c8e41a003629b45: feat(filters): clarify mode for RegEx fields (#2272) (@​zze0s)
  • 3e4bd4d259328d8a1ce98d25a60c980c9a3c62be: feat(indexers): use Proxy for API client calls (#2268) (@​zze0s)
  • a43f52d81e19cf553a0791e537a539e81728d668: feat(proxy): add HTTP support (#2270) (@​zze0s)

Bug fixes

  • c66af533f0162260a792b2e7f4245b1a92b197dd: fix(http): keep session cookie SameSite=Lax (#2259) (@​s0up4200)

Other work

  • 1af92330aa0c58fe15cc9c67a0b562fb68a88f38: build(deps): bump actions/checkout from 5 to 6 in the github group (#2262) (@​dependabot[bot])
  • a104c12c5366f8a388091366475efbd2521c9f2d: docs: update Linux start service command (#2261) (@​ChristianMHolt)

v1.69.0

Changelog

New Features

  • ed4044333d73ad4151d64675f36b7f4672cd64b9: feat(http): make CORS settings configurable (#2178) (@​zze0s)
  • 8c495773160f3b62adf7ee709e076c0e52e706a9: feat(http): release resources on close (#2164) (@​KyleSanderson)
  • e06ead09e0a03b6e76c9d7503bcd5328b47832c8: feat(indexers): DarkPeers add support for Featured Promo announce type (#2226) (@​jschavey)
  • 8521a62ba11e30aee47f050a2c89388eba6e6e7f: feat(indexers): add BJ-Share (#2231) (@​zze0s)
  • 01c273a388f26c259ae72310489c4dfa11c5f567: feat(indexers): migrate Aither to SASL authentication (#2250) (@​shgew)
  • 66f3064fb638a5695d5f209a70c130fca7159829: feat(indexers): update ReelFlix domain (#2232) (@​zze0s)
  • a7e875f99f2aa774e8b4455ff12d72b2ae6eac9f: feat(web): filter releases for Pending status (#2253) (@​zze0s)
  • e39850c398caa512b17ec071f46439caec8eecf6: feat(web): show warning banner for failed list refreshes (#2101) (@​martylukyy)

Bug fixes

  • 39bc6d8f6068de10878fcbc0f79e52bee0cb4875: fix(database): add missing rows.Close calls (#2238) (@​zze0s)
  • 19e5020be2aa2737eee0f1f4e5f6595e9c689e08: fix(database): db convert SQLite to PG issues (#2090) (@​katiekloss)
  • a39f2455fb0aedc31f55072b0652d695060e1278: fix(indexers): BJ-Share IRC channel capitilized (#2242) (@​fabricionaweb)
  • 4aff0c2122c10ed7fb162ef26943ebad1c2ffe94: fix(indexers): BJ-Share size to torrentSize (@​zze0s)
  • 791ef090a6934bd91823ebcc43c352817c69844b: fix(indexers): HHD regex (#2251) (@​zze0s)
  • 5568c59239050e6d85f22e900f789686f56da751: fix(macros): parse exec args on windows (#2233) (@​zze0s)
  • 009fffa7b327b29d6113a03e1e11c1f993a1ab1a: fix(proxy): test connection with non-redacted creds (#2223) (@​zze0s)
  • c7d0927820557f02e6469d4dd391a767092acac8: fix(web): dropdown causes crash (#2252) (@​zze0s)

Other work

  • 4a9f889d6a872cf65a4b704c113dc16cfbdfb084: build(deps): bump actions/setup-node from 5 to 6 in the github group (#2227) (@​dependabot[bot])
  • b0281b493cc1b4abd0ae08590e050e92d2fd3cb1: build(deps): bump github/codeql-action from 3 to 4 in the github group (#2220) (@​dependabot[bot])
  • 92028c1efb919a6a2d8bca6893ab2527643089cd: build(deps): bump the github group with 2 updates (#2237) (@​dependabot[bot])
  • 62bf406790b49df1475d42a4fa0b6cc0a7a5d5f3: build(deps): bump the golang group with 9 updates (#2245) (@​dependabot[bot])
  • d0cd1045bbf619aebeb9c79117a82c6e5cbd446d: build(deps): bump the npm group across 1 directory with 26 updates (#2224) (@​dependabot[bot])
  • a5878d8dbb067ac9cec9a9f730bfaad8afa678b1: build(deps): bump the npm group in /web with 13 updates (#2246) (@​dependabot[bot])
  • 9d9f4f104a1b4bb6f57c79f99f630106e189b71a: build: goreleaser update config (#2256) (@​zze0s)
  • 10bb765d2e0c83b357333c6dbdbe3d90b6510d4f: build: improve parallelism (#2187) (@​zze0s)
  • c9595ea08b6a9edc29f7bea1f33a47e421bc03c7: build: remove early web dist publish (#2255) (@​zze0s)
  • 750e2823611331b633dfefbc9b5c9d6bc8106249: chore(indexers): remove iAnon (#2221) (@​s0up4200)
Commits

Updates github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.17.0

What's Changed

Full Changelog: coreos/go-oidc@v3.16.0...v3.17.0

Commits

Updates github.com/hashicorp/go-version from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: hashicorp/go-version@v1.7.0...v1.8.0

Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.8.0 (Nov 28, 2025)

ENHANCEMENTS:

INTERNAL:

Commits
  • 505335e Merge pull request #175 from florianl/drop-init
  • 6dd734b drop init()
  • 0824a89 Merge pull request #172 from hashicorp/compliance/update-headers
  • 9325934 [COMPLIANCE] Update Copyright and License Headers
  • 5b82b98 Bump the github-actions-breaking group across 1 directory with 2 updates (#171)
  • 6c6cd77 Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking grou...
  • 0e50733 Bump actions/cache from 4.2.3 to 4.2.4 in the github-actions-backward-compati...
  • 4e24ef1 Bytes implementation (#161)
  • 437649a Add benchmark test for version.String() (#159)
  • b6c4db5 Merge pull request #158 from hashicorp/compliance-template
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.2

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.2

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates golang.org/x/image from 0.32.0 to 0.33.0

Commits
  • 9c9d08c go.mod: update golang.org/x dependencies
  • 742b1b7 all: fix some comments
  • 7321200 vector: use built-in max/min to simplify the code
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.32.0 to 0.33.0

Commits

Updates modernc.org/sqlite from 1.40.0 to 1.40.1

Commits
  • d33e568 Merge branch 'close_rows_on_canceled_context' into 'master'
  • eb5b277 add test
  • ae4fece add contributors/authors
  • ae43dcd Close Rows object if the context is canceled before deferred function
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the golang group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/autobrr/autobrr](https://github.com/autobrr/autobrr) | `1.68.0` | `1.70.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.16.0` | `3.17.0` |
| [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.7.0` | `1.8.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.2` |
| [golang.org/x/image](https://github.com/golang/image) | `0.32.0` | `0.33.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.32.0` | `0.33.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.40.0` | `1.40.1` |


Updates `github.com/autobrr/autobrr` from 1.68.0 to 1.70.0
- [Release notes](https://github.com/autobrr/autobrr/releases)
- [Commits](autobrr/autobrr@v1.68.0...v1.70.0)

Updates `github.com/coreos/go-oidc/v3` from 3.16.0 to 3.17.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.16.0...v3.17.0)

Updates `github.com/hashicorp/go-version` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-version@v1.7.0...v1.8.0)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.2
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.0...v1.18.2)

Updates `golang.org/x/image` from 0.32.0 to 0.33.0
- [Commits](golang/image@v0.32.0...v0.33.0)

Updates `golang.org/x/oauth2` from 0.32.0 to 0.33.0
- [Commits](golang/oauth2@v0.32.0...v0.33.0)

Updates `modernc.org/sqlite` from 1.40.0 to 1.40.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.40.0...v1.40.1)

---
updated-dependencies:
- dependency-name: github.com/autobrr/autobrr
  dependency-version: 1.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: golang.org/x/image
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: modernc.org/sqlite
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Dec 1, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@s0up4200 s0up4200 merged commit d684442 into main Dec 3, 2025
11 checks passed
@s0up4200 s0up4200 deleted the dependabot/go_modules/golang-ffcf4276d6 branch December 3, 2025 22:04
alexlebens pushed a commit to alexlebens/infrastructure that referenced this pull request Dec 11, 2025
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/autobrr/qui](https://github.com/autobrr/qui) | minor | `v1.8.1` -> `v1.9.1` |

---

### Release Notes

<details>
<summary>autobrr/qui (ghcr.io/autobrr/qui)</summary>

### [`v1.9.1`](https://github.com/autobrr/qui/releases/tag/v1.9.1)

[Compare Source](autobrr/qui@v1.9.0...v1.9.1)

#### Changelog

##### Bug Fixes

- [`441418b`](autobrr/qui@441418b): fix(api): remove user\_id session check from dashboard settings ([#&#8203;711](autobrr/qui#711)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`bd2587b`](autobrr/qui@bd2587b): fix(db): resolve cross-seed settings mutual exclusivity lockout ([#&#8203;714](autobrr/qui#714)) ([@&#8203;s0up4200](https://github.com/s0up4200))

**Full Changelog**: <autobrr/qui@v1.9.0...v1.9.1>

#### Docker images

- `docker pull ghcr.io/autobrr/qui:v1.9.1`
- `docker pull ghcr.io/autobrr/qui:latest`

#### What to do next?

- Join our [Discord server](https://discord.autobrr.com/qui)

Thank you for using qui!

### [`v1.9.0`](https://github.com/autobrr/qui/releases/tag/v1.9.0)

[Compare Source](autobrr/qui@v1.8.1...v1.9.0)

#### Changelog

##### Important

Cross-seeds are now added to `.cross`-suffixed categories by default. This is opt-out. The old delay logic is removed.

##### Highlights

- Customize your Dashboard-page (order, visibility)
- Tracker Breakdown section in Dashboard with import/export functionality
- Warnings and actions for cross-seeds when you attempt to delete torrents
- Show free space in torrent table footer

##### New Features

- [`1aa7360`](autobrr/qui@1aa7360): feat(dashboard): tracker breakdown and customizable layout ([#&#8203;637](autobrr/qui#637)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`85fd74b`](autobrr/qui@85fd74b): feat(jackett): propagate 429 rate limits with retry and cooldown ([#&#8203;684](autobrr/qui#684)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`a5777c4`](autobrr/qui@a5777c4): feat(reannounce): add configurable max retries setting ([#&#8203;685](autobrr/qui#685)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`6451e56`](autobrr/qui@6451e56): feat(settings): add TMM relocation behavior settings ([#&#8203;664](autobrr/qui#664)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`680fd25`](autobrr/qui@680fd25): feat(torrents): add confirmation dialogs for TMM and Set Location ([#&#8203;687](autobrr/qui#687)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`7f779f9`](autobrr/qui@7f779f9): feat(torrents): warn about cross-seeded torrents in delete dialogs ([#&#8203;670](autobrr/qui#670)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`1c489bc`](autobrr/qui@1c489bc): feat(ui): persist category collapse state in sidebar ([#&#8203;692](autobrr/qui#692)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`bdf807e`](autobrr/qui@bdf807e): feat(web): Torrent list details bar shows free space ([#&#8203;691](autobrr/qui#691)) ([@&#8203;finevan](https://github.com/finevan))

##### Bug Fixes

- [`9db8346`](autobrr/qui@9db8346): fix(crossseed): use matched torrent save path instead of category path ([#&#8203;700](autobrr/qui#700)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`40d7778`](autobrr/qui@40d7778): fix(instance): intern empty string on demand for bypass auth ([#&#8203;693](autobrr/qui#693)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0aaf39e`](autobrr/qui@0aaf39e): fix(jackett): fetch indexer capabilities in parallel with retries ([#&#8203;701](autobrr/qui#701)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`50e585b`](autobrr/qui@50e585b): fix(qbittorrent): cache tracker health counts in background ([#&#8203;662](autobrr/qui#662)) ([@&#8203;KyleSanderson](https://github.com/KyleSanderson))
- [`298ca05`](autobrr/qui@298ca05): fix(search): download torrent files via backend for remote instances ([#&#8203;686](autobrr/qui#686)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`27ee31a`](autobrr/qui@27ee31a): fix(torrents): AddTorrentDialog uses the downloadPath api ([#&#8203;677](autobrr/qui#677)) ([@&#8203;finevan](https://github.com/finevan))
- [`2427fdd`](autobrr/qui@2427fdd): fix(ui): use full category paths in multi-select ([#&#8203;683](autobrr/qui#683)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`917c65e`](autobrr/qui@917c65e): fix(web): add iOS Safari compatibility for torrent file picker ([#&#8203;707](autobrr/qui#707)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`2ccdc28`](autobrr/qui@2ccdc28): fix(web): dont hide free space when disk is full ([#&#8203;694](autobrr/qui#694)) ([@&#8203;ewenjo](https://github.com/ewenjo))

##### Other Changes

- [`d684442`](autobrr/qui@d684442): chore(deps): bump the golang group with 7 updates ([#&#8203;660](autobrr/qui#660)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`e1267fa`](autobrr/qui@e1267fa): chore(deps): bump the npm group across 1 directory with 29 updates ([#&#8203;663](autobrr/qui#663)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`8671971`](autobrr/qui@8671971): docs: Update README to remove size field description ([#&#8203;695](autobrr/qui#695)) ([@&#8203;s0up4200](https://github.com/s0up4200))

**Full Changelog**: <autobrr/qui@v1.8.1...v1.9.0>

#### Docker images

- `docker pull ghcr.io/autobrr/qui:v1.9.0`
- `docker pull ghcr.io/autobrr/qui:latest`

#### What to do next?

- Join our [Discord server](https://discord.autobrr.com/qui)

Thank you for using qui!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2366
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant