fix(deps): update go modules by renovate[bot] · Pull Request #12 · NX1X/Egret

renovate · 2026-08-01T06:56:18Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/miekg/dns	require	patch	`v1.1.62` → `v1.1.73`
github.com/spf13/cobra	require	minor	`v1.8.1` → `v1.10.2`
go (source)	golang	minor	`1.26.5` → `1.27.1`
go.yaml.in/yaml/v3	require	patch	`v3.0.4` → `v3.0.5`
golang.org/x/sys	require	minor	`v0.47.0` → `v0.48.0`

Release Notes

miekg/dns (github.com/miekg/dns)

spf13/cobra (github.com/spf13/cobra)

`v1.10.2`

Compare Source

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in #2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in #2327
fix: actions/setup-go v6 by @jpmcb in #2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in #2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in #2328
refactor: change minUsagePadding from var to const by @ssam18 in #2325

🤗 New Contributors

@rvergis made their first contribution in #2316
@htoyoda18 made their first contribution in #2328
@ssam18 made their first contribution in #2325
@dims made their first contribution in #2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

`v1.10.1`

Compare Source

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in #2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

`v1.10.0`

Compare Source

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in #2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #2303 (comment)

✨ Features

Flow context to command in SetHelpFunc by @Frassle in #2241
The default ShellCompDirective can be customized for a command and its subcommands by @albers in #2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in #2279

🪠 Testing

Test with Go 1.24 by @harryzcy in #2236
chore: Rm GitHub Action PR size labeler by @jpmcb in #2256

📝 Docs

Remove traling curlybrace by @yedayak in #2237
Update command.go by @styee in #2248
feat: Add security policy by @jpmcb in #2253
Update Readme (Warp) by @ericdachen in #2267
Add Periscope to the list of projects using Cobra by @anishathalye in #2299

New Contributors

@harryzcy made their first contribution in #2236
@yedayak made their first contribution in #2237
@Frassle made their first contribution in #2241
@styee made their first contribution in #2248
@ericdachen made their first contribution in #2267
@albers made their first contribution in #2238
@anishathalye made their first contribution in #2299
@tomasaschan made their first contribution in #2303

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

`v1.9.1`

Compare Source

🐛 Fixes

Fix CompletionFunc implementation by @ccoVeille in #2234
Revert "Make detection for test-binary more universal (#2173)" by @marckhouzam in #2235

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

`v1.9.0`

Compare Source

✨ Features

Allow linker to perform deadcode elimination for program using Cobra by @aarzilli in #1956
Add default completion command even if there are no other sub-commands by @marckhouzam in #1559
Add CompletionWithDesc helper by @ccoVeille in #2231

🐛 Fixes

Fix deprecation comment for Command.SetOutput by @thaJeztah in #2172
Replace deprecated ioutil usage by @nirs in #2181
Fix --version help and output for plugins by @nirs in #2180
Allow to reset the templates to the default by @marckhouzam in #2229

🤖 Completions

Make Powershell completion work in constrained mode by @lstemplinger in #2196
Improve detection for flags that accept multiple values by @thaJeztah in #2210
add CompletionFunc type to help with completions by @ccoVeille in #2220
Add similar whitespace escape logic to bash v2 completions than in other completions by @kangasta in #1743
Print ActiveHelp for bash along other completions by @marckhouzam in #2076
fix(completions): Complete map flags multiple times by @gabe565 in #2174
fix(bash): nounset unbound file filter variable on empty extension by @scop in #2228

🧪 Testing

Test also with go 1.23 by @nirs in #2182
Make detection for test-binary more universal by @thaJeztah in #2173

✍🏼 Documentation

docs: update README.md by @eltociear in #2197
Improve site formatting by @nirs in #2183
doc: add Conduit by @raulb in #2230
doc: azion project added to the list of CLIs that use cobra by @maxwelbm in #2198
Fix broken links in active_help.md by @vuil in #2202
chore: fix function name in comment by @zhuhaicity in #2216

🔧 Dependency upgrades

build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @thaJeztah in #2206
Update to latest go-md2man by @mikelolasagasti in #2201
Upgrade pflag dependencies for v1.9.0 by @jpmcb in #2233

Thank you to all of our amazing contributors and all the great work that's been going into the completions feature!!

👋🏼 New Contributors

@gabe565 made their first contribution in #2174
@maxwelbm made their first contribution in #2198
@lstemplinger made their first contribution in #2196
@vuil made their first contribution in #2202
@mikelolasagasti made their first contribution in #2201
@zhuhaicity made their first contribution in #2216
@ccoVeille made their first contribution in #2220
@kangasta made their first contribution in #1743
@aarzilli made their first contribution in #1956

Full Changelog: spf13/cobra@v1.8.1...v1.9.0

golang/go (go)

`v1.27.1`

`v1.27.0`

`v1.26.8`

`v1.26.7`

`v1.26.6`

yaml/go-yaml (go.yaml.in/yaml/v3)

`v3.0.5`

Compare Source

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- "before 6am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-01T06:56:21Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=14 days

Details:

Package	Change
`github.com/spf13/pflag`	`v1.0.5` -> `v1.0.9`
`golang.org/x/mod`	`v0.20.0` -> `v0.38.0`
`golang.org/x/sync`	`v0.8.0` -> `v0.22.0`
`golang.org/x/tools`	`v0.24.0` -> `v0.48.0`

egret-security-app · 2026-08-01T06:56:34Z

🪶 Egret report

Command: bash (+4 argument(s) omitted)
Mode: audit
Exit code: 0
Duration: 527ms
Connections: 1 · Processes: 2 · File writes: 2 · Violations: 1

⚠️ Flagged

Kind	Reason	Detail	Blocked
connection	raw-ip egress	172.66.147.243:443/tcp by curl[2164] with no prior DNS lookup	-

🌐 Connections

PID	Process	Destination	Port	Proto
2164	curl	172.66.147.243	443	tcp

📝 File writes

PID	Process	Op	Path
2164	bash	open-write
2164	curl	open-write	/dev/null

🧬 Processes

PID	PPID	Process	Filename
2164	2153	egret	/usr/bin/bash
2164	2153	bash	/usr/bin/curl

socket-security · 2026-08-01T06:56:48Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	go.yaml.in/yaml/v3@v3.0.4 ⏵ v3.0.5
	golang.org/x/sys@v0.47.0 ⏵ v0.48.0	⁺¹
	github.com/miekg/dns@v1.1.62 ⏵ v1.1.73	⁺¹
	github.com/spf13/cobra@v1.8.1 ⏵ v1.10.2

View full report

socket-security · 2026-08-01T06:56:51Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

coderabbitai · 2026-09-20T00:51:21Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: b390b02f-582b-49d0-9589-eb17ba17c035

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

renovate Bot requested a review from NX1X as a code owner August 1, 2026 06:56

renovate Bot added dependencies go labels Aug 1, 2026

renovate Bot assigned NX1X Aug 1, 2026

renovate Bot added dependencies go labels Aug 1, 2026

renovate Bot force-pushed the renovate/go-modules branch from 732c0bf to 2cd99ac Compare August 11, 2026 04:12

renovate Bot force-pushed the renovate/go-modules branch from 2cd99ac to c993453 Compare August 20, 2026 23:53

renovate Bot force-pushed the renovate/go-modules branch from c993453 to f737495 Compare August 29, 2026 04:44

renovate Bot added the toolchain label Aug 29, 2026

renovate Bot force-pushed the renovate/go-modules branch 2 times, most recently from 3406f97 to 148ffa3 Compare September 6, 2026 03:28

fix(deps): update go modules

015e238

renovate Bot force-pushed the renovate/go-modules branch from 148ffa3 to 015e238 Compare September 20, 2026 00:51

Navigation Menu

fix(deps): update go modules - #12

fix(deps): update go modules#12
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-modules

renovate Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

egret-security-app Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 20, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

🐛 Fix

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

🐛 Fixes

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades

👋🏼 New Contributors

Configuration

Uh oh!

renovate Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

egret-security-app Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🪶 Egret report

⚠️ Flagged

🌐 Connections

📝 File writes

🧬 Processes

Uh oh!

socket-security Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Sep 20, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 1, 2026 •

edited

Loading

renovate Bot commented Aug 1, 2026 •

edited

Loading

egret-security-app Bot commented Aug 1, 2026 •

edited

Loading

socket-security Bot commented Aug 1, 2026 •

edited

Loading

socket-security Bot commented Aug 1, 2026 •

edited

Loading