Bump github.com/hectane/go-acl from 0.0.0-20230122075934-ca0b05cb1adb to 1.0.0 - #438
Bump github.com/hectane/go-acl from 0.0.0-20230122075934-ca0b05cb1adb to 1.0.0#438dependabot[bot] wants to merge 1 commit into
Conversation
|
Dependabot (@dependabot) rebase |
895bbcd to
f40cbfb
Compare
|
/azp run microsoft.moc |
|
Azure Pipelines: Successfully started running 1 pipeline(s). |
There was a problem hiding this comment.
Pull request overview
This PR updates the project’s Go module dependencies by bumping github.com/hectane/go-acl to its v1.0.0 release (and adjusts related module metadata).
Changes:
- Bump
github.com/hectane/go-aclfrom a pseudo-version tov1.0.0. - Update
golang.org/x/sysindirect requirement tov0.46.0. - Refresh module sums to match the updated dependency set.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| go.mod | Updates required module versions (including go-acl and indirect x/sys). |
| go.sum | Updates checksums for the bumped go-acl module version. |
| github.com/davecgh/go-spew v1.1.1 // indirect | ||
| github.com/pmezard/go-difflib v1.0.0 // indirect | ||
| golang.org/x/net v0.54.0 // indirect | ||
| golang.org/x/sys v0.45.0 // indirect | ||
| golang.org/x/sys v0.46.0 // indirect | ||
| golang.org/x/text v0.37.0 // indirect |
There was a problem hiding this comment.
Thanks — this is accurate but benign, so leaving the PR as-is:
- The
replace golang.org/x/sys => v0.45.0entry is part of an intentional curated pin block (crypto v0.52.0, net v0.54.0, sys v0.45.0, …), so the effective build uses x/sys v0.45.0; the indirectrequire v0.46.0skew is inert, not a break. - All CI is green —
microsoft.mocBuild/Lint/StaticAnalysis, Analyze (go), and CodeQL all pass — confirminggo-acl v1.0.0compiles and passes cleanly against x/sys v0.45.0.
This PR only intends to bump go-acl; realigning the curated x/sys pin is out of scope and would risk disturbing a deliberate version set. Safe to merge as-is.
|
Dependabot (@dependabot) rebase |
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
|
Dependabot (@dependabot) rebase |
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
|
Dependabot (@dependabot) rebase |
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
|
Dependabot (@dependabot) recreate |
Bumps [github.com/hectane/go-acl](https://github.com/hectane/go-acl) from 0.0.0-20230122075934-ca0b05cb1adb to 1.0.0. - [Commits](https://github.com/hectane/go-acl/commits/v1.0.0) --- updated-dependencies: - dependency-name: github.com/hectane/go-acl dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
176a000 to
144a1ce
Compare
Bumps github.com/hectane/go-acl from 0.0.0-20230122075934-ca0b05cb1adb to 1.0.0.
Commits