Bump golang.org/x/sync from 0.9.0 to 0.19.0 - #11
Conversation
dependabot
Bot
added
dependencies
Security Policy Alert: Actions Policy ViolationThis workflow run has been blocked by StepSecurity's actions policy because it uses actions that are not allowed by your organization's policy. Disallowed Actions:
To fix this issue, please modify the workflow to use only allowed actions. Contact your organization administrator to request changes to the allowed actions list if needed. For more information, see StepSecurity's Actions Policy documentation. |
Security Policy Alert: Actions Policy ViolationThis workflow run has been blocked by StepSecurity's actions policy because it uses actions that are not allowed by your organization's policy. Disallowed Actions:
To fix this issue, please modify the workflow to use only allowed actions. Contact your organization administrator to request changes to the allowed actions list if needed. For more information, see StepSecurity's Actions Policy documentation. |
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.9.0 to 0.19.0. - [Commits](golang/sync@v0.9.0...v0.19.0) --- updated-dependencies: - dependency-name: golang.org/x/sync dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
69e987e to
546d342
Compare
There was a problem hiding this comment.
Pull request overview
Updates the project’s Go module dependencies by bumping golang.org/x/sync to a newer release, aligning the module graph with the updated x/sync version.
Changes:
- Bump
golang.org/x/syncfromv0.18.0tov0.19.0ingo.mod. - Update
go.sumchecksums for the newgolang.org/x/sync v0.19.0version.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| go.mod | Updates the required golang.org/x/sync version to v0.19.0. |
| go.sum | Refreshes checksums to match golang.org/x/sync v0.19.0. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Deleted user (ghost)
left a comment
Deleted user (ghost)
left a comment
There was a problem hiding this comment.
Bump golang.org/x/sync from 0.9.0 to 0.19.0
#11
Lawrence Lucas Large (LukeLarge)
left a comment
Lawrence Lucas Large (LukeLarge)
left a comment
There was a problem hiding this comment.
Bump golang.org/x/sync from 0.9.0 to 0.19.0
#11
|
Copilot open a new pull request to apply changes based on the comments in this thread |
|
Lawrence Lucas Large (@LukeLarge) I've opened a new pull request, #31, to work on those changes. Once the pull request is ready, I'll request review from you. |
Bumps golang.org/x/sync from 0.9.0 to 0.19.0.
Commits
2a180e2errgroup: use consistent read for SetLimit panic1966f53errgroup: fix some typos in comment04914c2all: upgrade go directive to at least 1.24.0 [generated]7fad2c9errgroup: revert propagation of panics8a14946errgroup: remove duplicated comment1869c69all: replace deprecated ioutild1ac909sync/errgroup: PanicError.Error print stack trace506c70ferrgroup: propagate panic and Goexit through Wait396f3a0errgroup: document calling Go before Waitb637f27errgroup: drop support for Go versions before 1.20Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)