Skip to content

deps: bump the go-deps group with 3 updates - #12

Merged
annaveretennykova merged 5 commits into
mainfrom
dependabot/go_modules/go-deps-bb1db73a36
Oct 21, 2026
Merged

annaveretennykova merged 5 commits into
mainfrom
dependabot/go_modules/go-deps-bb1db73a36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 3 updates: github.com/signintech/gopdf, golang.org/x/image and golang.org/x/net.

Updates github.com/signintech/gopdf from 0.38.1 to 0.38.2

Commits
  • a7b7299 Merge branch 'SashaMIT-fix/cid-to-gid-map'
  • 8245a9c fix: emit CIDToGIDMap Identity for Type 2 CID fonts
  • 678cc87 Merge pull request #350 from fstandhartinger/docs/fix-import-pdf-example-urls
  • d3b4ee1 docs: fix dead download URLs in the Import existing PDF example
  • See full diff in compare view

Updates golang.org/x/image from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/net from 0.60.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 3 updates: [github.com/signintech/gopdf](https://github.com/signintech/gopdf), [golang.org/x/image](https://github.com/golang/image) and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/signintech/gopdf` from 0.38.1 to 0.38.2
- [Changelog](https://github.com/signintech/gopdf/blob/master/Changelog.md)
- [Commits](signintech/gopdf@v0.38.1...v0.38.2)

Updates `golang.org/x/image` from 0.46.0 to 0.47.0
- [Commits](golang/image@v0.46.0...v0.47.0)

Updates `golang.org/x/net` from 0.60.0 to 0.61.0
- [Commits](golang/net@v0.60.0...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/signintech/gopdf
  dependency-version: 0.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: golang.org/x/image
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies A Dependabot-opened update. label Oct 19, 2026
@annaveretennykova

Copy link
Copy Markdown
Member

/lgtm

@annaveretennykova

Copy link
Copy Markdown
Member

/approve

@github-actions github-actions Bot added area/engine internal/engine/, internal/ast/, schema/, and the root pdfengine package area/docs docs/, assets/, root *.md, LICENSE, NOTICE approved Approved to merge. Set by /approve (write access). With lgtm and no do-not-merge/*, gate passes. labels Oct 21, 2026
@annaveretennykova

Copy link
Copy Markdown
Member

/lgtm

@github-actions github-actions Bot added the lgtm Looks good to me. Set by /lgtm from someone with write access. label Oct 21, 2026
@annaveretennykova
annaveretennykova merged commit 89043e2 into main Oct 21, 2026
14 checks passed
@annaveretennykova
annaveretennykova deleted the dependabot/go_modules/go-deps-bb1db73a36 branch October 21, 2026 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Approved to merge. Set by /approve (write access). With lgtm and no do-not-merge/*, gate passes. area/docs docs/, assets/, root *.md, LICENSE, NOTICE area/engine internal/engine/, internal/ast/, schema/, and the root pdfengine package dependencies A Dependabot-opened update. lgtm Looks good to me. Set by /lgtm from someone with write access.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant