Skip to content

chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5#4280

Merged
willmurphyscode merged 2 commits intomainfrom
dependabot/go_modules/github.com/mholt/archives-0.1.5
Oct 14, 2025
Merged

chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5#4280
willmurphyscode merged 2 commits intomainfrom
dependabot/go_modules/github.com/mholt/archives-0.1.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 14, 2025

Bumps github.com/mholt/archives from 0.1.3 to 0.1.5.

Release notes

Sourced from github.com/mholt/archives's releases.

v0.1.5

What's Changed

Full Changelog: mholt/archives@v0.1.4...v0.1.5

v0.1.4

This release contains an important bug fix if you walk (fs.WalkDir()) archives multiple times using archives.ArchiveFS; it would omit directory trees with implicit structure (i.e. if the archive doesn't have an explicit entry for each directory in the tree) after the first walk, on subsequent walks.

Upgraded dependencies, and improved brotli stream matching. Thanks to those who contributed!

What's Changed

New Contributors

Full Changelog: mholt/archives@v0.1.3...v0.1.4

Commits
  • e30ac60 rar: Update rardecode to v2.2.0 and remove WriterTo interface (#56)
  • cca9224 Deprecate FormatGNU; introduce Tar.Format
  • 1816065 go.mod: update modules and compress to 1.18.0 (#54)
  • 88a2597 brotli: Don't match when it does match another format (fix #51)
  • 71b922e Fix ArchiveFS.Stat() for implicit dirs
  • a6166fa Amortize implicit dirs too; fix skipped entries in subsequent walks
  • 9132adf Test go 1.24 and 1.25 (#49)
  • 814d03a Update dependencies to avoid CVE-2025-58058 (#48)
  • f07cd8e Make brotli stream matcher more robust to uncompressed binary and ASCII data ...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/mholt/archives](https://github.com/mholt/archives) from 0.1.3 to 0.1.5.
- [Release notes](https://github.com/mholt/archives/releases)
- [Commits](mholt/archives@v0.1.3...v0.1.5)

---
updated-dependencies:
- dependency-name: github.com/mholt/archives
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Involves changes to go.mod go.sum label Oct 14, 2025
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com>
@willmurphyscode willmurphyscode merged commit 1d5bcc5 into main Oct 14, 2025
12 checks passed
@willmurphyscode willmurphyscode deleted the dependabot/go_modules/github.com/mholt/archives-0.1.5 branch October 14, 2025 18:22
spiffcs added a commit that referenced this pull request Oct 22, 2025
* main:
  chore(deps): update tools to latest versions (#4302)
  chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4 (#4301)
  chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#4299)
  support universal (fat) mach-o binary files (#4278)
  chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4296)
  chore(deps): bump anchore/sbom-action from 0.20.7 to 0.20.8 (#4297)
  convert posix path back to windows (#4285)
  Remove duplicate image source providers (#4289)
  chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.7 (#4293)
  feat: add option to fetch remote licenses for pnpm-lock.yaml files (#4286)
  Add PDM parser (#4234)
  chore(deps): update tools to latest versions (#4291)
  fix: panic during java archive maven resolution (#4290)
  Extract zip archive with multiple entries (#4283)
  chore: update to use old configuration on new cosign (#4287)
  chore(deps): update anchore dependencies (#4282)
  chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5 (#4280)
  add docs to configs (#4281)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Involves changes to go.mod go.sum

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants