Skip to content

chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1#1965

Merged
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1
Jun 1, 2026
Merged

chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1#1965
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1.

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.1

What's Changed

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

Commits
  • 3c3be60 Merge pull request #2137 from go-git/validate-v5
  • 3fba897 plumbing: format/packfile, cap delta chain depth in parser
  • a97d660 Merge pull request #2125 from hiddeco/v5/format-input-bounds
  • aeaa125 plumbing: format/objfile, require Header before Read
  • 1f38e17 plumbing: format/packfile, bound inflate size
  • f7545a0 plumbing: format/idxfile, bound nr by file size
  • 170b881 Merge pull request #2116 from pjbgf/symlink-v5
  • 7b6d994 Merge pull request #2117 from hiddeco/v5/worktree-fs-mkdirall-root-noop
  • f0709b3 git: Stop validating symlink target paths
  • 776d00f git: Allow MkdirAll on worktree-root paths
  • Additional commits viewable in compare view

@dependabot dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels May 19, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 19, 2026 15:58
@dependabot dependabot Bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels May 19, 2026
@github-actions github-actions Bot added the size/xs Extra small label May 19, 2026
@matthiasbruns

matthiasbruns commented May 26, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from 3650591 to c676c49 Compare May 26, 2026 05:14
@frewilhelm

frewilhelm commented May 29, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot failed to update your dependencies. Because of this, Dependabot cannot update this pull request.

@frewilhelm

frewilhelm commented May 29, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from c676c49 to c43d7ab Compare May 29, 2026 17:12
@matthiasbruns

matthiasbruns commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from c43d7ab to c5a1d2e Compare June 1, 2026 05:51
matthiasbruns
matthiasbruns approved these changes Jun 1, 2026
View reviewed changes

@matthiasbruns matthiasbruns left a comment •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security/hardening patch for go-git: SSH path quoting, submodule URL fixes, packfile delta validation tightening. Patch release, no breaking changes.

@frewilhelm

frewilhelm commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

Security/hardening patch for go-git: SSH path quoting, submodule URL fixes, packfile delta validation tightening. Patch release, no breaking changes. CI passes.

CI does not pass https://github.com/open-component-model/ocm/actions/runs/26737717804/job/78794327019?pr=1965

@matthiasbruns

matthiasbruns commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from c5a1d2e to 3408e56 Compare June 1, 2026 10:36
@matthiasbruns

matthiasbruns commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

yeah the bump seems to break something... I will take over and see if I can fix it

@matthiasbruns matthiasbruns self-assigned this Jun 1, 2026
@matthiasbruns matthiasbruns mentioned this pull request Jun 1, 2026
Merged
@matthiasbruns

matthiasbruns commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

Fixed in #1983

@frewilhelm frewilhelm closed this in d41adba Jun 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch June 1, 2026 15:00
@frewilhelm frewilhelm restored the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch June 1, 2026 15:02
@frewilhelm frewilhelm reopened this Jun 1, 2026
@frewilhelm frewilhelm force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from 3408e56 to a5c16ac Compare June 1, 2026 16:19
@frewilhelm

frewilhelm commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1
16d2302 
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.0...v5.19.1)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch from a5c16ac to 16d2302 Compare June 1, 2026 16:44
@frewilhelm frewilhelm enabled auto-merge (squash) June 1, 2026 16:46
@frewilhelm frewilhelm merged commit c666a61 into main Jun 1, 2026
21 checks passed
@frewilhelm frewilhelm deleted the dependabot/go_modules/github.com/go-git/go-git/v5-5.19.1 branch June 1, 2026 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@matthiasbruns matthiasbruns matthiasbruns approved these changes

@frewilhelm frewilhelm frewilhelm approved these changes

Assignees

@matthiasbruns matthiasbruns

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/xs Extra small

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@matthiasbruns @frewilhelm