[scality-renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/stretchr/testify	v1.11.1 → v1.12.1

---

Release Notes

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

Compare Source

What's Changed

Functional Changes

• assert: make *AssertionFunc types just aliases by @​dolmen in #​1563

Fixes

• mock: avoid panic when expected type is nil in Arguments.Diff by @​mutaiib in #​1775
• mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1786
• suite: validate method signatures and continue execution for valid tests by @​vyas-git in #​1665
• assert.PanicsWithError: report error message by @​olivergondza in #​1400
• assert: IsIncreasing et al can return false w/out failing by @​brackendawson in #​1787
• add type to error message of assert.Same by @​egawata in #​1792
• mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @​brackendawson in #​1795
• assert: truncate very long objects in test failure messages by @​brackendawson in #​1646
• assert: fix NotSubset error messages using %#v instead of %q (fixes #​1800) by @​nghiack7 in #​1888
• suite: prevent panic when SetupTest skips with HandleStats by @​blackwell-systems in #​1877

Documentation, Build & CI

• CI: test also with Go 1.23 by @​dolmen in #​1783
• Vendor unmaintained github.com/pmezard/go-difflib by @​brackendawson in #​1708
• Promote ccoVeille to maintainer by @​brackendawson in #​1784
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1790
• assert.YAMLEq: Document mutlidoc behavior by @​brackendawson in #​1791
• _codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @​dolmen in #​1782
• doc: remove ineffective inline code blocks by @​brackendawson in #​1714
• Tag generated assertions as non-generated in new .gitattributes by @​ubunatic in #​1815
• chore: vendor go-spew from https://github.com/davecgh/go-spew by @​ccoVeille in #​1827
• require: fix godoc generation for assertions returning a bool by @​Baxromumarov in #​1850
• docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @​a2not in #​1821
• docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @​a2not in #​1842
• EMERITUS.md: add @​tylerb by @​dolmen in #​1812
• CI: test also with Go 1.24 by @​alexandear in #​1856
• deps: bump objx to v0.5.3 and remove dependency cycle issue by @​ccoVeille in #​1823
• CI: upgrade GitHub Actions and pin hashes by @​SuperQ in #​1883
• CI: add _readme-gofmt tool to reformat Go code in README by @​dolmen in #​1889
• CI: add check of GitHub Action pinned hashes against tag by @​dolmen in #​1885
• _codegen: modernize by @​dolmen in #​1890
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1906
• mock: Mock.Return does not exist anymore by @​Kentzo in #​1905

New Contributors

• @​mutaiib made their first contribution in #​1775
• @​vyas-git made their first contribution in #​1665
• @​olivergondza made their first contribution in #​1400
• @​egawata made their first contribution in #​1792
• @​ubunatic made their first contribution in #​1815
• @​Baxromumarov made their first contribution in #​1850
• @​a2not made their first contribution in #​1821
• @​nghiack7 made their first contribution in #​1888
• @​blackwell-systems made their first contribution in #​1877
• @​Kentzo made their first contribution in #​1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

• mock: avoid panic when expected type is nil in Arguments.Diff by @​mutaiib in #​1775
• CI: test also with Go 1.23 by @​dolmen in #​1783
• mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1786
• suite: validate method signatures and continue execution for valid tests by @​vyas-git in #​1665
• Vendor unmaintained github.com/pmezard/go-difflib by @​brackendawson in #​1708
• Promote ccoVeille to maintainer by @​brackendawson in #​1784
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1790
• assert.PanicsWithError: report error message by @​olivergondza in #​1400
• assert: IsIncreasing et al can return false w/out failing by @​brackendawson in #​1787
• add type to error message of assert.Same by @​egawata in #​1792
• assert.YAMLEq: Document mutlidoc behavior by @​brackendawson in #​1791
• mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @​brackendawson in #​1795
• _codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @​dolmen in #​1782
• assert: truncate very long objects in test failure messages by @​brackendawson in #​1646
• doc: remove ineffective inline code blocks by @​brackendawson in #​1714
• Tag generated assertions as non-generated in new .gitattributes by @​ubunatic in #​1815
• chore: vendor go-spew from https://github.com/davecgh/go-spew by @​ccoVeille in #​1827
• require: fix godoc generation for assertions returning a bool by @​Baxromumarov in #​1850
• docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @​a2not in #​1821
• docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @​a2not in #​1842
• EMERITUS.md: add @​tylerb by @​dolmen in #​1812
• CI: test also with Go 1.24 by @​alexandear in #​1856
• deps: bump objx to v0.5.3 and remove dependency cycle issue by @​ccoVeille in #​1823
• CI: upgrade GitHub Actions and pin hashes by @​SuperQ in #​1883
• assert: fix NotSubset error messages using %#v instead of %q (fixes #​1800) by @​nghiack7 in #​1888
• suite: prevent panic when SetupTest skips with HandleStats by @​blackwell-systems in #​1877
• CI: add _readme-gofmt tool to reformat Go code in README by @​dolmen in #​1889
• CI: add check of GitHub Action pinned hashes against tag by @​dolmen in #​1885
• _codegen: modernize by @​dolmen in #​1890
• assert: make *AssertionFunc types just aliases by @​dolmen in #​1563
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1906
• mock: Mock.Return does not exist anymore by @​Kentzo in #​1905

New Contributors

• @​mutaiib made their first contribution in #​1775
• @​vyas-git made their first contribution in #​1665
• @​olivergondza made their first contribution in #​1400
• @​egawata made their first contribution in #​1792
• @​ubunatic made their first contribution in #​1815
• @​Baxromumarov made their first contribution in #​1850
• @​a2not made their first contribution in #​1821
• @​nghiack7 made their first contribution in #​1888
• @​blackwell-systems made their first contribution in #​1877
• @​Kentzo made their first contribution in #​1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[scality-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
go.yaml.in/yaml/v3	v3.0.4 -> v3.0.5

[github-actions]

Dependency Bump Evaluation

Version change: v1.11.1 -> v1.12.1 (minor)
Semver bump type: minor (spans v1.12.0 and v1.12.1)

Changes:

• v1.12.0: *AssertionFunc types changed to aliases, multiple bug fixes in mock/suite/assert packages, vendored go-difflib and go-spew dependencies
• v1.12.1: Switched YAML library from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (reduced external dependencies)

Breaking changes: None. The AssertionFunc type alias change is the most significant functional change but this codebase does not use any AssertionFunc types.

Security concerns: None. This is a test-only dependency (testify) with no production code impact. No suspicious patterns in the changes -- the vendored dependencies (go-difflib, go-spew) replace unmaintained upstream repos with testify-internal copies.

Impact on codebase:

• No usage of AssertionFunc types (alias change) -- unaffected
• No usage of yaml functions -- unaffected by YAML library swap
• No usage of IsIncreasing, NotSubset, PanicsWithError, YAMLEq -- unaffected by assert fixes
• No usage of suite package -- unaffected by suite fixes
• Mock usage exists (56 occurrences across 6 test files) -- mock changes are bug fixes (panic prevention, revert of v1.11.0 stringer matching change). These fix edge cases and should not affect existing tests.

CI status: Tests and linting still in progress at time of review. No failures detected.

Recommendation: SAFE TO MERGE (once CI passes)

Notes: Cannot auto-approve because PR is authored by scality-renovate[bot] (only dependabot PRs are eligible for auto-approval). A human reviewer should approve after CI checks pass.

-- Claude Code