fix(deps): update go modules (minor/patch) by renovate[bot] · Pull Request #31 · OpenCHAMI/fru-tracker

renovate · 2026-07-27T08:35:13Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
entgo.io/ent	`v0.14.5` → `v0.14.6`	require	patch
github.com/getkin/kin-openapi	`v0.149.0` → `v0.153.0`	require	minor
github.com/go-chi/chi/v5	`v5.4.0` → `v5.5.0`	require	minor
github.com/mattn/go-sqlite3	`v1.14.17` → `v1.14.53`	require	patch
github.com/openchami/fabrica	`v0.4.14` → `v0.4.15`	require	patch
github.com/spf13/viper	`v1.16.0` → `v1.21.0`	require	minor
github.com/stretchr/testify	`v1.11.1` → `v1.12.1`	require	minor
go (source)	`1.26.10` → `1.27.3`	golang	minor	`1.27.4`

Release Notes

ent/ent (entgo.io/ent)

`v0.14.6`

Compare Source

getkin/kin-openapi (github.com/getkin/kin-openapi)

`v0.153.0`

Compare Source

What's Changed

Add fuzz targets by @fenollp in #1373
openapi3: set the failing schema on JSON Schema 2020-12 validation errors by @frodeaa in #1378
openapi3filter: parse number values as decimal only by @LuisFigueroaG in #1366
Seed fuzzing using APIs-guru corpus, covering the YAML path + fix some crashes by @fenollp in #1380
openapi3filter: decode query, path, header and cookie params with typeless const/enum schemas by @Yi-111-a in #1368
openapi2conv: handle some nil derefs by @reuvenharrison in #1384
ci: a minimize budget the minimizer can finish in by @reuvenharrison in #1385
openapi3: return a typed error for a disallowed external $ref by @reuvenharrison in #1370
openapi3: reject a multipleOf of zero or less in Schema.Validate by @LuisFigueroaG in #1379
openapi3filter: treat a handler that writes no status as a 200 in Validator.Middleware by @LuisFigueroaG in #1389
deps: update oasdiff/yaml to v0.1.3 by @reuvenharrison in #1387
openapi3: validate the pattern of a schema without type in Schema.Validate by @LuisFigueroaG in #1398
openapi3: set maxLength in Schema.WithMaxLengthDecodedBase64 by @LuisFigueroaG in #1401
openapi2conv: FromV3 no longer turns a binary header into a form field by @fenollp in #1403
openapi3: internalize webhook references by @KashifManzer in #1408
openapi2conv: keep required and format on a converted form field by @reuvenharrison in #1405
openapi2conv: escape a base path converted to a server of its own by @reuvenharrison in #1404
internal: add nodeindex (decoding YAML natively 1/3) by @reuvenharrison in #1382
openapi3: UnmarshalYAML for the types (decoding YAML natively 2/3) by @reuvenharrison in #1383
openapi3: keep component content when internalizing a ref to a file by @akasakariko in #1409
Fuzzing harder by @fenollp in #1411
openapi3filter: test deepObject array index limits by @connabyss in #1412
openapi3: scope whole-file schema fragments to their document by @Aryangupta-05 in #1413
openapi3: compare FuzzLoadFromData's validation errors by message by @fenollp in #1417
openapi3: internalize refs under the 3.1 subschema keywords by @fenollp in #1418
openapi3: an extension next to a $ref reaches the schema it resolves to by @reuvenharrison in #1400
openapi3: DefaultRefNameResolver stops stripping extensions at the last dot by @Yi-111-a in #1419
openapi3: isolate reference sibling constraints by @subotac in #1406
openapi3: reject impossible days and offsets in the date and date-time formats by @LuisFigueroaG in #1407
openapi3: stop InternalizeRefs prefix trimming at the filesystem root by @Yi-111-a in #1421
openapi3: resolve refs under a header's content by @JayOfTheKeyboard in #1424
openapi3filter: reject an empty query value instead of filling in the default by @fyousfi-ionos in #1427
openapi3: reuse root components when internalizing refs by @ZXLyyds100 in #1425
openapi3filter: read OpenAPI 3.1 contentMediaType data without a registered decoder by @nk-batman21 in #1388
openapi3: validate the callbacks of an operation by @fenollp in #1429
fuzzing: add ./fetch-fuzz-crashers.sh [--days N] by @fenollp in #1428
openapi3: internalize the refs next to a $ref in OpenAPI 3.1 by @fenollp in #1430
openapi3: internalize the examples of parameters and headers by @fenollp in #1431
openapi2, openapi3: skip the json decode when data cannot be json, wrap both errors by @fenollp in #1432
openapi3: switch the loader to the native decode (decoding YAML natively 3/3) by @reuvenharrison in #1238
openapi3: cut the cost of building the types from the nodes by @reuvenharrison in #1433

New Contributors

@frodeaa made their first contribution in #1378
@KashifManzer made their first contribution in #1408
@akasakariko made their first contribution in #1409
@connabyss made their first contribution in #1412
@Aryangupta-05 made their first contribution in #1413
@subotac made their first contribution in #1406
@JayOfTheKeyboard made their first contribution in #1424
@fyousfi-ionos made their first contribution in #1427
@ZXLyyds100 made their first contribution in #1425
@nk-batman21 made their first contribution in #1388

Full Changelog: getkin/kin-openapi@v0.152.0...v0.153.0

`v0.152.0`

Compare Source

What's Changed

openapi2conv: push path-level body/formData parameters into operations by @Yi-111-a in #1340
fix(openapi3): resolve transitive component refs in JSON Schema 2020-12 validation by @Yi-111-a in #1342
openapi3: honor readOnly/writeOnly from allOf schemas in required checks by @ybai08 in #1343
openapi3: resolve $refs of Components.Links by @fenollp in #1344
openapi3: marshal a schema's empty type list as absent rather than null by @fenollp in #1345
openapi3: drop the Header dump from its content/schema error by @fenollp in #1346
openapi3gen: always propagate field tag by @phooijenga in #1347
routers/gorillamux: return an error instead of panicking when registering routes by @fenollp in #1348
openapi3: report $refs to null nodes as unresolved instead of panicking by @fenollp in #1349
openapi3: validate null servers, server variables, tags and components without panicking by @fenollp in #1351
openapi2conv: fix FromV3Parameter panics on binary schema refs and value-less schemas by @fenollp in #1352
openapi3filter: parse integer values as base 10 by @LuisFigueroaG in #1353
openapi3filter: decode spaceDelimited and pipeDelimited query objects by @ybai08 in #1350
Case-sensitive usmarshalling with json/v2 by @fenollp in #1355
openapi3filter: decode deepObject and non-exploded form object properties of urlencoded bodies by @ybai08 in #1354
openapi3: keep $ref siblings on a schema reached through a cycle by @Yi-111-a in #1357
tests: go around encoding/json/v2's randomness in error message by @fenollp in #1361
tests: remove actual network calls from tests by @fenollp in #1362
tests: run more in parallel by @fenollp in #1363
openapi3: ignore reference siblings in OpenAPI 3.0 by @lucky798213 in #1268
openapi3: WalkSchemas and WalkParameters stop on a callback cycle by @reuvenharrison in #1364
openapi3filter: validate response headers described with content by @LuisFigueroaG in #1358
openapi3filter: honor ExcludeRequestQueryParams for path item parameters by @LuisFigueroaG in #1365
openapi3: handle fields next to $ref as OpenAPI 3.0, 3.1 and 3.2 specify by @fenollp in #1371
changelog: fixup rebased messes by @fenollp in #1372

New Contributors

@ybai08 made their first contribution in #1343
@phooijenga made their first contribution in #1347

Full Changelog: getkin/kin-openapi@v0.151.0...v0.152.0

`v0.151.0`

Compare Source

What's Changed

openapi3: parse $ref slice indices with strconv.Atoi by @fenollp in #1324
openapi3: remove deprecated package-global IncludeOrigin by @fenollp in #1325
openapi3filter: decode and encode +json media types as JSON by @BogdanYarotsky in #1326
openapi3: reject additionalOperations keys that case-vary a fixed method by @fenollp in #1328
openapi3: recognize OpenAPI 3.2.1 by @fenollp in #1327
openapi3filter: set body defaults only for media types with an encoder by @BogdanYarotsky in #1329
openapi3: avoid a race around sliceUniqueItemsChecker by @fenollp in #1331
openapi2: name the response in Responses decoding errors by @fenollp in #1332
openapi3: compare enum values by JSON value by @fenollp in #1333
openapi3: move the built-in schema validator to schema_3point0_validator.go by @fenollp in #1335
modernize by @fenollp in #1334
openapi3filter: report form-urlencoded values that fail to parse instead of dropping them by @LuisFigueroaG in #1337
openapi3filter: follow style and explode when applying query array defaults by @LuisFigueroaG in #1336
openapi3filter: decode anyOf/oneOf/allOf array items in path, header and cookie parameters by @LuisFigueroaG in #1338
openapi3filter: add Options.KeepValidatedValue by @BogdanYarotsky in #1330

Full Changelog: getkin/kin-openapi@v0.150.0...v0.151.0

`v0.150.0`

Compare Source

What's Changed

openapi3: fix nil pointer panic in resolveExampleRef on null examples entry by @KrisKennawayDD in #1263
openapi3: reject integers outside the int64 range for integer formats by @youdie006 in #1266
openapi3: WalkSubtree walks a single schema; visit every subschema field by @reuvenharrison in #1267
openapi3gen: make component schema selection deterministic by @EnriqueL8 in #1272
openapi2conv: preserve response examples when converting to v3 by @jakezwang in #1273
openapi3filter: trim whitespace in values of header arrays by @simonyang08 in #1261
openapi3filter: don't duplicate empty query params when applying defaults by @TastyHeadphones in #1274
openapi3filter: decode every values of header arrays and objects by @youdie006 in #1275
openapi3: validate path parameter names as sets, not counts by @cpruijsen in #1276
ci: bump to go 1.27 by @fenollp in #1277
re-tidy up marshal error message after go1.27 by @fenollp in #1278
openapi3filter: allow documented bodies with RejectWhenRequestBodyNotSpecified by @youssefcamao in #1280
openapi3: preserve body example validation context by @SAY-5 in #1281
openapi3: name an unused server URL variable as unused by @Yi-111-a in #1282
openapi3filter: reduce buffered file body decoding allocations by @SAY-5 in #1283
openapi2conv: keep basePath when Swagger 2.0 omits host by @Yi-111-a in #1285
openapi3: validate security requirement scheme names by @SAY-5 in #1287
openapi3: preserve component refs in JSON Schema 2020 validation by @lucky798213 in #1269
openapi2: keep Responses Object extensions by @LuisFigueroaG in #1290
Various fixes and improvements by @fenollp in #1291
openapi3: validate recursive schemas below the root again by @fenollp in #1292
openapi3: allow a schema to be both readOnly and writeOnly in 3.1 by @reuvenharrison in #1294
openapi3: keep the structure of JSON Schema 2020-12 validation errors by @OlegVoytovich in #1295
openapi3: accept unregistered and case-insensitive http security schemes by @LuisFigueroaG in #1293
routers/gorillamux: keep path-level servers to their own path by @LuisFigueroaG in #1296
openapi3: report readOnly/writeOnly violations as SchemaError by @fenollp in #1297
openapi3: avoid tests leaking global format validators by @fenollp in #1298
openapi3filter: guard body decoders registry behind a lock by @fenollp in #1299
openapi3: save on GC when Validate()ing many-schemas documents by @fenollp in #1300
openapi3: Validate() using the existing thread-safe regexp cache for noticeable perf improvements by @fenollp in #1301
reduce the amount of tests that hang sequentially by @fenollp in #1302
openapi3: no longer discard errors when Validate()ing Encoding's Headers by @fenollp in #1303
openapi2,3: let Types decode a scalar type from YAML by @Yi-111-a in #1305
tests: use each httptest server's own client by @fenollp in #1308
openapi3: honor schema names in discriminator mapping when validating by @LuisFigueroaG in #1304
Validate encodings, add a / decoder fallback (#481), and ignore case in media types by @fenollp in #1306
ci: run Windows tests with GODEBUG=clobberfree=1 by @fenollp in #1310
openapi3filter: reject duplicate member names in JSON bodies by @BogdanYarotsky in #1311
openapi3: default explode to false for spaceDelimited and pipeDelimited query parameters by @LuisFigueroaG in #1315
openapi2conv: inline referenced response headers in FromV3 by @LuisFigueroaG in #1317
SchemaError refactoring by @fenollp in #1318
ci: run Windows tests with asyncpreemptoff=1 by @fenollp in #1319
Remove superfluous spaces by @fenollp in #1320
2-Go versions in CI + use test helpers by @fenollp in #1321
openapi2conv: convert collectionFormat of query parameters by @LuisFigueroaG in #1322
openapi3: default encoding explode to false for spaceDelimited and pipeDelimited by @LuisFigueroaG in #1316
ci: cache fixtures dir /after/ checkout by @fenollp in #1323

New Contributors

@KrisKennawayDD made their first contribution in #1263
@youdie006 made their first contribution in #1266
@jakezwang made their first contribution in #1273
@simonyang08 made their first contribution in #1261
@TastyHeadphones made their first contribution in #1274
@cpruijsen made their first contribution in #1276
@youssefcamao made their first contribution in #1280
@Yi-111-a made their first contribution in #1282
@lucky798213 made their first contribution in #1269
@LuisFigueroaG made their first contribution in #1290
@OlegVoytovich made their first contribution in #1295
@BogdanYarotsky made their first contribution in #1311

Full Changelog: getkin/kin-openapi@v0.149.0...v0.150.0

go-chi/chi (github.com/go-chi/chi/v5)

`v5.5.0`

Compare Source

What's Changed

middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only by @VojtechVitek in #1195
middleware: test ClientIPFromHeader does not fall back to other headers by @renanmpimentel in #1208
middleware: build Maybe handler once by @lowgame in #1197
middleware: round and clamp Retry-After delays up to whole seconds by @VojtechVitek in #1217
middleware: parse quoted ContentCharset media parameters by @VojtechVitek in #1218
middleware: SupressNotFound must not mutate the request's route context by @VojtechVitek in #1220

New Contributors

@renanmpimentel made their first contribution in #1208
@lowgame made their first contribution in #1197

Full Changelog: go-chi/chi@v5.4.0...v5.5.0

mattn/go-sqlite3 (github.com/mattn/go-sqlite3)

`v1.14.53`: 1.14.53

Compare Source

What's Changed

Fuse bind and first step into one CGO crossing by @mattn in #1455
Fuse step and column fetch into one CGO crossing in Next by @mattn in #1460
fix: release replaced authorizer callbacks by @ryanchou1994 in #1458
Return an error instead of crashing when a connection is used after Close by @mattn in #1462
Report missing arguments when Exec has no arguments by @laodouya in #1471
Upgrade SQLite to version 3540100 by @mattn in #1472

New Contributors

@ryanchou1994 made their first contribution in #1458
@laodouya made their first contribution in #1471

Full Changelog: mattn/go-sqlite3@v1.14.52...v1.14.53

`v1.14.52`: 1.14.52

Compare Source

What's Changed

Replace schema probe with eager first step for cached statements by @mattn in #1454

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

`v1.14.51`: 1.14.51

Compare Source

What's Changed

fix: Exec returns wrong arg count in "not enough args" error by @semihbkgr in #1396
refactor: Clean up deprecated // +build legacy build tags by @zxysilent in #1428
Fixed som typos and wrappings in sqlite3_func_crypt.go documentation. by @kberov in #1367
Replace copy-on-write handle map with sync.Map by @mattn in #1453
Avoid per-row goroutines for query cancellation by @bradengroom in #1444
Flush statement cache when the schema changes by @mattn in #1452

New Contributors

@semihbkgr made their first contribution in #1396
@zxysilent made their first contribution in #1428
@kberov made their first contribution in #1367
@bradengroom made their first contribution in #1444

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

`v1.14.50`: 1.14.50

Compare Source

What's Changed

Handle NULL and BLOB values in json example Scan by @mattn in #1441
Add workflow to create releases on tag push by @mattn in #1443
fix: keep vtab handle registered when xDestroy fails by @canesin in #1446

New Contributors

@canesin made their first contribution in #1446

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

`v1.14.49`: 1.14.49

Compare Source

What's Changed

Release vtable and cursor handles when SQLite destroys them by @mattn in #1429
Do not clobber SQLite's default cost estimates in BestIndex by @mattn in #1430
Translate SQL NULL filter arguments to nil like goVUpdate by @mattn in #1431
Identify updated row by argv 0 in goVUpdate by @mattn in #1432
Ignore Used for constraints SQLite marked not usable by @mattn in #1433
Reject nil module and nil BestIndex result by @mattn in #1434
Fail upgrade tool on download and write errors by @mattn in #1435
Fix off-by-one truncating SQL in fuzz target by @mattn in #1436
Fix wrong results and cursor state sharing in series example by @mattn in #1437
Use the table name from xCreate args in vtable example by @mattn in #1438
Close leaked rows in hook example by @mattn in #1439
Close prepared statement and fail if limit is not enforced in limit example by @mattn in #1440
Upgrade SQLite to version 3053004 by @mattn in #1442

Full Changelog: mattn/go-sqlite3@v1.14.48...v1.14.49

`v1.14.48`: 1.14.48

Compare Source

What's Changed

Add Serialize and Deserialize support by @otoolep in #1089
Replace namedValue with driver.NamedValue to avoid copying exec/query args by @charlievieth in #1128
Add go 1.20 to workflow matrix, remove 1.17 by @connyay in #1136
Add build tags to support both x86 and ARM compilation on macOS by @Spaider in #1069
Fix virtual table example. by @andrzh in #1149
Update README.md by @parthokr in #1163
Update amalgamation code by @mattn in #1166
Update amalgamation code by @mattn in #1197
Fix docker job by @itizir in #1201
Fix musl build (#1164) by @leso-kn in #1177
update go version to 1.19 by @mattn in #1208
Update amalgamation code to 3.45.0 by @mattn in #1207
Update amalgamation code to 3.45.1 by @mattn in #1211
close channel by @mattn in #1213
fix: some typos by @pomadev in #1222
Add support for libsqlite3 on z/OS by @dustin-ward in #1239
Update amalgamation code to 3.46.1 by @mattn in #1273
close statement when missing query arguments by @mattn in #1281
Upgrade upload-artifact action by @jonstacks in #1300
Remove suggestion that CGO isn't always needed by @samjewell in #1290
remove superfluous use of runtime.SetFinalizer on SQLiteRows by @charlievieth in #1301
Fix sqlite3_opt_unlock_notify with USE_LIBSQLITE3 by @q66 in #1262
Fix memory leak in callbackRetText function by @hionay in [#1259](https://redirect.github

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Denver)

Branch creation
- "before 5am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-07-27T08:35:16Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
`ariga.io/atlas`	`v0.32.1-0.20250325101103-175b25e1c1b9` -> `v0.36.2-0.20250730182955-2c6300d0a3e1`
`github.com/fsnotify/fsnotify`	`v1.6.0` -> `v1.9.0`
`github.com/spf13/afero`	`v1.9.5` -> `v1.15.0`
`github.com/spf13/cast`	`v1.5.1` -> `v1.10.0`
`github.com/subosito/gotenv`	`v1.4.2` -> `v1.6.0`

renovate Bot added dependencies Pull requests that update a dependency file renovate labels Jul 27, 2026

renovate Bot added the renovate label Jul 27, 2026

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 2 times, most recently from 488331c to d8da03f Compare August 1, 2026 10:10

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 4 times, most recently from b7d6fd7 to 145b60b Compare August 17, 2026 10:50

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 6 times, most recently from 9fff328 to 574d0db Compare August 29, 2026 16:46

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 13 times, most recently from 7b3a0ec to 09c5167 Compare September 2, 2026 23:04

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 6 times, most recently from b0988f4 to df82979 Compare September 8, 2026 11:34

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch from df82979 to 667535e Compare September 27, 2026 22:07

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 4 times, most recently from 58c183b to 9a897b7 Compare October 17, 2026 22:26

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 8 times, most recently from 4261065 to af626f0 Compare October 25, 2026 17:42

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 3 times, most recently from b88c7a7 to d91067c Compare November 4, 2026 19:26

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch 2 times, most recently from 287f505 to 7274ad8 Compare November 8, 2026 21:52

fix(deps): update go modules (minor/patch)

f7499be

renovate Bot force-pushed the renovate/go-modules-(minorpatch) branch from 7274ad8 to f7499be Compare November 10, 2026 17:46

Navigation Menu

Repository navigation

fix(deps): update go modules (minor/patch) - #31

fix(deps): update go modules (minor/patch)#31
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-modules-(minorpatch)

renovate Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.14.6

v0.153.0

What's Changed

New Contributors

v0.152.0

What's Changed

New Contributors

v0.151.0

What's Changed

v0.150.0

What's Changed

New Contributors

v5.5.0

What's Changed

New Contributors

v1.14.53: 1.14.53

What's Changed

New Contributors

v1.14.52: 1.14.52

What's Changed

v1.14.51: 1.14.51

What's Changed

New Contributors

v1.14.50: 1.14.50

What's Changed

New Contributors

v1.14.49: 1.14.49

What's Changed

v1.14.48: 1.14.48

What's Changed

Configuration

Uh oh!

renovate Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 27, 2026 •

edited

Loading

`v0.14.6`

`v0.153.0`

`v0.152.0`

`v0.151.0`

`v0.150.0`

`v5.5.0`

`v1.14.53`: 1.14.53

`v1.14.52`: 1.14.52

`v1.14.51`: 1.14.51

`v1.14.50`: 1.14.50

`v1.14.49`: 1.14.49

`v1.14.48`: 1.14.48

renovate Bot commented Jul 27, 2026 •

edited

Loading