chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 in /dashboard - #4134
chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 in /dashboard#4134dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.47.0 to 0.48.0. - [Commits](golang/sys@v0.47.0...v0.48.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
Scott-Emberson
left a comment
Scott-Emberson
left a comment
There was a problem hiding this comment.
The golang.org/x/sys bump itself is clean: dashboard/go.mod moves 0.47.0 to 0.48.0 with the matching go.sum hashes, no code changes, and CI is green across the Go jobs.
One thing beyond the title, worth a look before this lands. The same diff also bumps the module's go directive from 1.25.0 to 1.26.0 in dashboard/go.mod. That is a larger change than "bump x/sys": it raises the minimum Go toolchain needed to build the dashboard, which matters here given how many forks and contributors track these paths. CI passing tells me our runners have 1.26 available, but it does not tell me the bump is required. If x/sys 0.48.0 genuinely needs go 1.26, worth saying so in the description so the minimum-version rise is a deliberate, visible decision. If it does not, pinning the directive back to 1.25.0 keeps the PR to the single dependency it claims to bump.
The x/sys change is fine on its own. The go directive bump is the only thing I would want confirmed as intended.
1 participant
Bumps golang.org/x/sys from 0.47.0 to 0.48.0.
Commits
613e257cpu: add riscv64 hwprobe drift test6f7b10funix: add MLOCK_ONFAULT constant663e7c8cpu: add basic support for GOARCH=sparc64de5f12fcpu: add ppc64le POWER10 detection80e8acfunix: run go fix1e3c182unix: add IPMI interfaced429e20unix: stop generating sparc termbits from the generic headerbd3bddfunix: add missing HWTSTAMP_* constantse812f53windows: add SO_SNDTIMEO constant for socket optionsf6989c5unix: align Ifreq so its union accessors cannot faultDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)