chore(deps)(deps): Bump the api-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #748 · GameplanePanel/Gameplane

dependabot · 2026-10-19T03:12:53Z

Bumps the api-minor-patch group with 6 updates in the /api directory:

Package	From	To
github.com/go-chi/chi/v5	`5.3.2`	`5.5.0`
github.com/go-jose/go-jose/v4	`4.1.5`	`4.1.6`
github.com/minio/minio-go/v7	`7.3.0`	`7.4.1`
golang.org/x/crypto	`0.57.0`	`0.58.0`
golang.org/x/mod	`0.41.0`	`0.42.0`
golang.org/x/text	`0.42.0`	`0.43.0`

Updates github.com/go-chi/chi/v5 from 5.3.2 to 5.5.0

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.5.0

What's Changed

middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only by @VojtechVitek in go-chi/chi#1195

middleware: test ClientIPFromHeader does not fall back to other headers by @renanmpimentel in go-chi/chi#1208

middleware: build Maybe handler once by @lowgame in go-chi/chi#1197

middleware: round and clamp Retry-After delays up to whole seconds by @VojtechVitek in go-chi/chi#1217

middleware: parse quoted ContentCharset media parameters by @VojtechVitek in go-chi/chi#1218

middleware: SupressNotFound must not mutate the request's route context by @VojtechVitek in go-chi/chi#1220

New Contributors

@renanmpimentel made their first contribution in go-chi/chi#1208

@lowgame made their first contribution in go-chi/chi#1197

Full Changelog: go-chi/chi@v5.4.0...v5.5.0

v5.4.0

What's Changed

Improve godoc: add links and titles by @dolmen in go-chi/chi#1027

Add Clone method to Context by @VojtechVitek in go-chi/chi#1157

middleware: ContentCharset should skip requests without a body by @VojtechVitek in go-chi/chi#1158

Update compress middleware support Brotli support documentation by @sm3142 in go-chi/chi#1007

fix: panic on Mount() when a router is mounted onto itself by @sk-sanjay01 in go-chi/chi#1159

test(middleware): Improves test coverage by @nszilard in go-chi/chi#700

Remove superfluous import aliases by @JRaspass in go-chi/chi#1166

Bump minimum Go to 1.24, use b.Loop() by @JRaspass in go-chi/chi#1164

Use slices.Backward where appropriate by @JRaspass in go-chi/chi#1165

Replace "interface{}" with "any" by @JRaspass in go-chi/chi#1167

Simplify chi.URLParam, call chi.URLParamFromCtx by @JRaspass in go-chi/chi#1168

middleware: record response status when flushing by @jakezwang in go-chi/chi#1174

middleware: honor Discard when flushing by @LeulTew in go-chi/chi#1185

README: point middleware doc links to chi/v5 by @VojtechVitek in go-chi/chi#1196

middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* by @VojtechVitek in go-chi/chi#1214

Fixes GHSA-j6qf-3m9c-vwj3

New Contributors

@dolmen made their first contribution in go-chi/chi#1027

@sm3142 made their first contribution in go-chi/chi#1007

@sk-sanjay01 made their first contribution in go-chi/chi#1159

@nszilard made their first contribution in go-chi/chi#700

@jakezwang made their first contribution in go-chi/chi#1174

@LeulTew made their first contribution in go-chi/chi#1185

Full Changelog: go-chi/chi@v5.3.2...v5.4.0

Commits

3a33ba5 middleware: SupressNotFound must not mutate the request's route context (#1220)
6075570 middleware: parse quoted ContentCharset media parameters (#1218)
46295d0 middleware: test Retry-After rounding in one table test (#1217)
c6e33a1 middleware: build Maybe handler once (#1197)
c9744a3 middleware: test ClientIPFromHeader does not fall back to other headers (#1208)
fff8bb2 middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only (#1195)
7f9b744 middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* (#1214)
167e1e3 README: point middleware doc links to chi/v5 (#1196)
3d1777a middleware: honor Discard when flushing (#1185)
b1c9ab4 middleware: record response status when flushing (#1174)
Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.6

Fixed Security Issues

This release contains a fix for GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

Reject mismatched JWE CEK lengths by @akshithg in go-jose/go-jose#266

Add a tests containerfile and threat model by @mcpherrinm in go-jose/go-jose#300

Fix error message for future issued tokens by @inahga in go-jose/go-jose#303

Full Changelog: go-jose/go-jose@v4.1.5...v4.1.6

Commits

a0111f8 Merge commit from fork
dd39a41 Fix error message for future issued tokens (#303)
13b7118 Add a tests containerfile and threat model (#300)
25b55fe Reject mismatched JWE CEK lengths (#266)
See full diff in compare view

Updates github.com/minio/minio-go/v7 from 7.3.0 to 7.4.1

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

v7.4.1

What's Changed

fix: abort failed uploads even when the caller cancels by @harshavardhana in minio/minio-go#2318

Full Changelog: minio/minio-go@v7.4.0...v7.4.1

v7.4.0

Go 1.26 or later is now required. Go 1.25 is out of support, and golang.org/x/net v0.60.0 (the fix for GO-2026-6603, 6610, 6611, 6612 and 6617) requires Go 1.26 (#2313).

What's Changed

feat(rdma): stream a PUT over RDMA instead of pinning the whole object by @harshavardhana in minio/minio-go#2284

fix(rdma): report the transferred size from Stat on an RDMA GET by @harshavardhana in minio/minio-go#2285

feat: add ListUnsorted() for the ?unsorted=true listing extension by @harshavardhana in minio/minio-go#2286

fix(s3utils): reject path-shaped bucket names explicitly by @zveinn in minio/minio-go#2287

fix: use rerr instead of err in EOF check during multipart stream upload by @jiuker in minio/minio-go#2288

fix: swap Owner XML tags so DisplayName/ID parse correctly by @jiuker in minio/minio-go#2289

fix: race on shared checksum hasher in parallel multipart upload by @jiuker in minio/minio-go#2290

fix: typos in S3 Express endpoint and randString alphabet by @jiuker in minio/minio-go#2291

update minio-cpp version v0.7.0 by @harshavardhana in minio/minio-go#2292

fix: keep opts.Internal on CompleteMultipartUpload by @harshavardhana in minio/minio-go#2297

fix: select S3 Express zonal endpoint from the bucket's AZ by @jiuker in minio/minio-go#2293

Return CopyObject checksums in UploadInfo by @Vonng in minio/minio-go#2295

feat: support dualstack S3 Express endpoints by @jiuker in minio/minio-go#2298

Allow setting custom upload limits by @klauspost in minio/minio-go#2299

signer: fix streaming signer to include Content-Type in SignedHeaders (fixes #2300) by @jiuker in minio/minio-go#2301

fix: honor the caller's TLS trust on the RDMA path by @harshavardhana in minio/minio-go#2302

Report listing checksums consistently, add WithRestoreStatus by @klauspost in minio/minio-go#2303

Fix windows CI by @klauspost in minio/minio-go#2307

fix CopyObject swallowing errors embedded in a 200 OK response by @huanghaoyuanhhy in minio/minio-go#2306

fix: trim whitespace-only Region in error responses before header fallback by @cipherprofessor in minio/minio-go#2308

credentials: send the requested AssumeRole DurationSeconds as is by @prakashsvmx in minio/minio-go#2310

ci: test on Go 1.26/1.27 and bump golang.org/x/net to v0.60.0 by @harshavardhana in minio/minio-go#2313

docs: remove broken Slack badges by @auroraxo in minio/minio-go#2304

credentials: allow NewKubernetesIdentity to read a projected token file by @harshavardhana in minio/minio-go#2312

fix: trim whitespace from bucket location by @vigneshakaviki in minio/minio-go#2274

docs: fix 'Recieved' typo in CancelBucketReplicationResync by @harshavardhana in minio/minio-go#2314

compose: allow parallel upload-part-copy with NumThreads by @harshavardhana in minio/minio-go#2316

fix: send RetainUntilDate in UTC by @harshavardhana in minio/minio-go#2315

get: add opt-in parallel range GET via ParallelWorkers by @harshavardhana in minio/minio-go#2317

New Contributors

@Vonng made their first contribution in minio/minio-go#2295

@cipherprofessor made their first contribution in minio/minio-go#2308

@prakashsvmx made their first contribution in minio/minio-go#2310

@auroraxo made their first contribution in minio/minio-go#2304

@vigneshakaviki made their first contribution in minio/minio-go#2274

... (truncated)

Commits

1a663bb update lib version to v7.4.1
c68b12c fix: abort failed uploads even when the caller cancels (#2318)
8a72fb4 update lib version to v7.4.0
85df9ce get: add opt-in parallel range GET via ParallelWorkers (#2317)
91dc4dd fix: send RetainUntilDate in UTC (#2315)
79b8caa compose: allow parallel upload-part-copy with NumThreads (#2316)
1ab9013 docs: fix 'Recieved' typo in CancelBucketReplicationResync (#2314)
21d2ec1 fix: trim whitespace from bucket location (#2274)
450a9b3 credentials: allow NewKubernetesIdentity to read a projected token file (#2312)
aeb0641 docs: remove broken Slack badges (#2304)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits

8fdf07b go.mod: update golang.org/x dependencies
2437861 salsa20: fix keystream reuse in LoongArch LSX tail
c3db4df acme: prefer test log helpers in test contexts
4e01a84 acme: adds support for profiles draft
8f0f111 ssh: check that no Unicode-aware string function is used
b39ff6d ssh: add certificate algorithms for ML-DSA keys
4465db3 ssh: add the ML-DSA public key algorithms
83e695b ssh: implement ETM mode for CBC ciphers
946083a ssh: only drop a trailing carriage return
543dde9 ssh: accept known_hosts entries with a multi-word comment
Additional commits viewable in compare view

Updates golang.org/x/mod from 0.41.0 to 0.42.0

Commits

b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
1e9a5ae go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits

ac40b0f go.mod: update golang.org/x dependencies
6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
d0ecd29 secure/bidirule: lazily precompute ASCII table
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 6 updates Bumps the api-minor-patch group with 6 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.2` | `5.5.0` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.5` | `4.1.6` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.3.0` | `7.4.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` | Updates `github.com/go-chi/chi/v5` from 5.3.2 to 5.5.0 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.3.2...v5.5.0) Updates `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.1.5...v4.1.6) Updates `github.com/minio/minio-go/v7` from 7.3.0 to 7.4.1 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.3.0...v7.4.1) Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0 - [Commits](golang/crypto@v0.57.0...v0.58.0) Updates `golang.org/x/mod` from 0.41.0 to 0.42.0 - [Commits](golang/mod@v0.41.0...v0.42.0) Updates `golang.org/x/text` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.42.0...v0.43.0) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api-minor-patch - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: golang.org/x/crypto dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: golang.org/x/mod dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch - dependency-name: golang.org/x/text dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-19T03:13:02Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Source mode: Auto
Repository: GameplanePanel/Gameplane
Branch: master
File: .coderabbit.yaml
Commit: 552114b
Layers: Repository YAML
Review profile: CHILL
Plan: Advanced
Run ID: 174a1d3d-3f11-4b22-bd22-b0bd1fe125b6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-10-19T04:23:09Z

CI Report - `cc15030`

run 39846361044 - attempt 2

0 failed - 32 passed - 1 skipped - unknown elapsed

Test selection: full (selection-rule change) - per-suite table

Coverage

Module	Measured	Gate	Margin
web	L95.87 S94.37 B89.27 F91.79	L92 S92 B82 F76	+2.37

Changed

Area	Files	+/-
api/	2	+20/-20
(root)	1	+7/-0
test/	1	+5/-1

Slowest jobs

no job duration data available

e2e buckets run

bot-fast

…8516a64687 Signed-off-by: Claude <noreply@anthropic.com>

make generate manifests adds these go.work.sum entries after the chi/minio-go/x/* bumps in api/, so the codegen-drift gate fails until they are committed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Signed-off-by: Claude <noreply@anthropic.com>

ValgulNecron · 2026-10-22T19:43:52Z

e2e operator / arm64 (kind) failed on a6b4819, but the failure isn't caused by this PR. TestCISelection_ChartChangeRunsEverySuite (from #778, already on master) passed its assertions, and then t.TempDir cleanup failed with unlinkat .../.git: directory not empty. That's most likely a background git gc / git maintenance --auto racing the cleanup. The same failure was seen on #775. A fix (-c gc.auto=0 -c maintenance.auto=false in the test's git helpers) is being prepared separately and is waiting on maintainer sign-off, so it isn't ported here. I'll re-run the failed jobs once this run finishes, which also covers the cancelled amd64 build e2e images.

Generated by Claude Code

Each TestCISelection_* test commits a whole checkout, which leaves enough loose objects to start git's background gc and maintenance. On arm64 they were still writing into .git when t.TempDir removed it, so the tests failed at cleanup with "directory not empty" after every assertion had passed (#748, #775; #785 hit the same in the coverage fixture). The git helpers in the e2e test and both Python test files now pass gc.auto=0 and maintenance.auto=false. Approved by valgul 2026-10-22. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Signed-off-by: Claude <noreply@anthropic.com>

Port of the e2e part of 298bd8a (PR #779, approved by valgul 2026-10-22). TestCISelection_* failed at t.TempDir cleanup on arm64 with "directory not empty" because background gc/maintenance was still writing into .git. This blocks the operator bucket on this PR; the change becomes a no-op once #779 reaches master. (cherry picked from commit 298bd8a, e2e file only) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Signed-off-by: Claude <noreply@anthropic.com>

…8516a64687 Signed-off-by: Claude <noreply@anthropic.com> # Conflicts: # api/go.sum

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026

github-actions Bot added area: api REST/WebSocket gateway type: chore Maintenance, deps, or housekeeping labels Oct 19, 2026

claude added 2 commits October 22, 2026 17:52

Merge branch 'master' into dependabot/go_modules/api/api-minor-patch-…

24cfc9b

…8516a64687 Signed-off-by: Claude <noreply@anthropic.com>

claude added 2 commits October 22, 2026 20:07

Merge branch 'master' into dependabot/go_modules/api/api-minor-patch-…

cc15030

…8516a64687 Signed-off-by: Claude <noreply@anthropic.com> # Conflicts: # api/go.sum

ValgulNecron merged commit 54d5819 into master Oct 22, 2026
191 of 192 checks passed

dependabot Bot deleted the dependabot/go_modules/api/api-minor-patch-8516a64687 branch October 22, 2026 22:01

Navigation Menu

Repository navigation

chore(deps)(deps): Bump the api-minor-patch group across 1 directory with 6 updates - #748

chore(deps)(deps): Bump the api-minor-patch group across 1 directory with 6 updates#748
ValgulNecron merged 5 commits into
masterfrom
dependabot/go_modules/api/api-minor-patch-8516a64687

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

coderabbitai Bot commented Oct 19, 2026 •

edited

Loading

Review skipped

Uh oh!

github-actions Bot commented Oct 19, 2026 •

edited

Loading

Uh oh!

ValgulNecron commented Oct 22, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

v5.5.0

What's Changed

New Contributors

v5.4.0

What's Changed

New Contributors

v4.1.6

Fixed Security Issues

Breaking Changes

Changed

v7.4.1

What's Changed

v7.4.0

What's Changed

New Contributors

Uh oh!

coderabbitai Bot commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CI Report - cc15030

Coverage

Changed

Slowest jobs

e2e buckets run

Uh oh!

ValgulNecron commented Oct 22, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

coderabbitai Bot commented Oct 19, 2026 •

edited

Loading

github-actions Bot commented Oct 19, 2026 •

edited

Loading

CI Report - `cc15030`