Skip to content

chore(deps): bump the gomod group across 1 directory with 4 updates - #1701

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-504a5df011
Closed

chore(deps): bump the gomod group across 1 directory with 4 updates#1701
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-504a5df011

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 4 updates in the / directory: github.com/VirusTotal/yara-x/go, github.com/google/go-containerregistry, github.com/klauspost/compress and github.com/shirou/gopsutil/v4.

Updates github.com/VirusTotal/yara-x/go from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/VirusTotal/yara-x/go's releases.

v1.20.0

  • Implement SIMD-accelerated masked literal matching (#691).
  • Improve atom extraction heuristics for better performance (#690, 1e14f60).
  • Improve scan performance by applying file size and file header constraints only to regular expressions (#741).
  • Serialize Aho-Corasick automata directly with compiled rules for faster deserialization (3c61ef8).
  • Add --ignore-invalid-rules CLI option to skip rules that fail to compile (#704).
  • Expose ignore_invalid_rules in Python API (#711).
  • Add type annotations to match and return data in Python API (#692).
  • Add yrx_scanner_max_matches_per_pattern to C API and Scanner.MaxMatchedPerPattern to Go API (a33fa8e).
  • Add rlib crate types to yara-x-capi and yara-x-py to allow linking into wrapper crates (3c411d8).
  • Implement experimental msi, vba, and olecf modules (#709, 35e16ef).
  • Parse ShellItems and malformed sections in lnk module (#722).
  • Raise warning when patterns are unintendedly included in a set (#729).
  • Improve code completion in language server by distinguishing enums from other fields (a59e311).
  • Improve playground usability and add light/dark theme support (#701, #707, #731, 15f4984).
  • BUGFIX: Prevent panics and provide clear error message for regular expressions exceeding size limits (89df3f7).
  • BUGFIX: Prevent panic when filesize is compared to float values (328dcb3).
  • BUGFIX: Allow Teddy pattern matching algorithm to propagate early termination and respect timeouts (9d62d72).
  • BUGFIX: Correctly anchor patterns in of expressions with explicit offsets (439d642).
  • BUGFIX: Properly report compile error when exceeding maximum local variables limit (af53582).
  • BUGFIX: Escape special control characters in JSON and YAML serialization (#696).
  • BUGFIX: Do not ignore private modifier on hex and regular expression patterns (#698).
  • BUGFIX: Cap ZIP buffer pre-allocation to compressed size (#702).
  • BUGFIX: Robustly encode 64-bit string handles for WASM (#710).
  • BUGFIX: Align completions with default formatting in language server (#713).
  • BUGFIX: Fix accuracy issues when computing profiling time spent on each rule (6364574).
  • BUGFIX: Prevent naming conflicts in Python bindings by setting module name explicitly to yara_x (95fc833, 54435ac).
  • BUGFIX: Add protection against null pointers in C API (bf95890).

Contributors: @​1ndahous3 @​kevinmuoz @​malvidin @​MichaelTheSynthCat @​paul-atx @​saguywalker @​tlansec @​wxsBSD @​zdiff

Commits
  • 60ad069 chore: bump version to 1.20.0.
  • ce67892 tests: fix test case broken after disabling experimental modules.
  • 529a207 perf: apply file size and file header constraints only to regular expressions...
  • 35e16ef chore: disable modules msi, vba and olecf as they are still experimental.
  • 396b8c3 ci: allow publishing to VS Marketplace to fail gracefully
  • 7fd65d9 ci: publish the language server to Open VSX registry.
  • a1f4e54 chore: bump minimum Go version to 1.26 (#739)
  • e389dda ci: update GitHub Action versions (#740)
  • 95fc833 fix: explicitly set Python module name to yara_x
  • 1429bfd docs: fix warnings while running cargo doc.
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.22.0 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

Commits
  • 8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
  • 5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
  • 969402f fix(mutate): make Time layer updates lazy (#2429)
  • 25c682e flatten: preserve config and layer media types when flattening (#2438)
  • 79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
  • 4b9b3c7 fix(release): honor declared Go toolchain (#2435)
  • e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
  • 8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
  • 163134d validate: support index attestation manifests and empty configs (#2414)
  • 44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits
  • 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
  • f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
  • 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
  • 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
  • ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
  • f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
  • 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
  • 0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
  • 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
  • dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.26.7 to 4.26.8

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.26.8

What's Changed

cpu

disk

net

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.26.7...v4.26.8

Commits
  • 7d254a0 Merge pull request #2127 from Ahm3dRN/windows-commandline-information
  • 4dab2b9 Merge pull request #2136 from pgimalac/aix-disk-usage-statfs
  • 1ddce22 Merge pull request #2141 from shirou/dependabot/github_actions/vmactions/free...
  • ec8a313 chore(deps): bump vmactions/freebsd-vm from 1.5.4 to 1.5.5
  • 26ae363 Merge pull request #2140 from shirou/dependabot/github_actions/vmactions/free...
  • 21afc16 chore(deps): bump vmactions/freebsd-vm from 1.5.2 to 1.5.4
  • fbf8dd1 fixed getProcessCommandLine error path to match master and refined the tests ...
  • 97835bd Windows CMDLine native fallback feedback fixes
  • 3e8ab43 fixed gofumpt
  • 4631d96 Implement NtQueryInformationProcess to get commandline Windows 8.1+
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the gomod group across 1 directory with 4 updates
15aa957 
Bumps the gomod group with 4 updates in the / directory: [github.com/VirusTotal/yara-x/go](https://github.com/VirusTotal/yara-x), [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [github.com/klauspost/compress](https://github.com/klauspost/compress) and [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil).


Updates `github.com/VirusTotal/yara-x/go` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.19.0...v1.20.0)

Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.22.0...v0.22.1)

Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.2...v1.20.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.7 to 4.26.8
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.7...v4.26.8)

---
updated-dependencies:
- dependency-name: github.com/VirusTotal/yara-x/go
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 7, 2026
@egibs egibs closed this Sep 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-504a5df011 branch September 7, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@egibs