go-epub
go-epub copied to clipboard
chore(deps): bump the all group across 1 directory with 2 updates
Bumps the all group with 2 updates in the / directory: github.com/gabriel-vasile/mimetype and github.com/gofrs/uuid/v5.
Updates github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
Release notes
Sourced from github.com/gabriel-vasile/mimetype's releases.
v1.4.4
What's Changed
Security fixes:
Update
golang.org/x/netto latest. Fixes: CVE-2023-45288Performance improvements:
- Change tar detection to use checksum instead of legal ranges of values in gabriel-vasile/mimetype#466
- ftyp: exit asap to prevent mem allocs in gabriel-vasile/mimetype#517
- Improve x-subrip detection performance in gabriel-vasile/mimetype#524
- improve performance for text detection in gabriel-vasile/mimetype#532
- Using io.ReadAll instead of ioutil.ReadAll by
@phihungtfin gabriel-vasile/mimetype#525Benchmarks:
before: BenchmarkText/application/x-ndjson-8 663314 2027 ns/op 4306 B/op 6 allocs/op BenchmarkSliceRand-8 688160 1690 ns/op 728 B/op 75 allocs/op BenchmarkSrt-8 946042 1089 ns/op 4240 B/op 5 allocs/op after: BenchmarkText/application/x-ndjson-8 1930292 678.6 ns/op 160 B/op 4 allocs/op BenchmarkSliceRand-8 1232066 1173 ns/op 160 B/op 4 allocs/op BenchmarkSrt-8 3235448 368.8 ns/op 64 B/op 2 allocs/opNew Contributors
@phihungtfmade their first contribution in gabriel-vasile/mimetype#525Full Changelog: https://github.com/gabriel-vasile/mimetype/compare/v1.4.3...v1.4.4
Commits
43192c8Bump the github-actions group across 1 directory with 3 updates (#534)07821d3Using io.ReadAll instead of ioutil.ReadAll (#525)9bd6023github actions & readme: remove codecov badge (#533)ff4d3d0improve performance for text detection (#532)bc511b8add defaultLimit and use it when resetting back (#531)341c422Improve x-subrip detection performance (#524)043efb9fix benchmark files order (#518)fd7639eftyp: exit asap to prevent mem allocs (#517)889166dMerge pull request #505 from gabriel-vasile/dependabot/github_actions/github-...e938b0cMerge pull request #502 from gabriel-vasile/dependabot/go_modules/gomod-82d2d...- Additional commits viewable in compare view
Updates github.com/gofrs/uuid/v5 from 5.0.0 to 5.2.0
Release notes
Sourced from github.com/gofrs/uuid/v5's releases.
v5.2.0
This minor release updates the UUID v6 and v7 features of package to be complaint to draft RFC-9562, which replaces the previous family of uuid drafts. Additionally, it adds more specific error types, and tunes up Github Actions safety practices
What's Changed
- Update to RFC 9562 by
@kohenkatzin gofrs/uuid#117- [StepSecurity] Apply security best practices by
@step-security-botin gofrs/uuid#135- Bump actions/checkout from 2.7.0 to 4.1.5 by
@dependabotin gofrs/uuid#137- Bump ossf/scorecard-action from 2.0.6 to 2.3.3 by
@dependabotin gofrs/uuid#136- Bump actions/dependency-review-action from 2.5.1 to 4.3.2 by
@dependabotin gofrs/uuid#138- Bump actions/upload-artifact from 3.1.3 to 4.3.3 by
@dependabotin gofrs/uuid#140- Bump codecov/codecov-action from 2.1.0 to 4.3.1 by
@dependabotin gofrs/uuid#139- Implemented support for checkable errors by
@PatrLindin gofrs/uuid#131New Contributors
@kohenkatzmade their first contribution in gofrs/uuid#117@step-security-botmade their first contribution in gofrs/uuid#135@dependabotmade their first contribution in gofrs/uuid#137@PatrLindmade their first contribution in gofrs/uuid#131Full Changelog: https://github.com/gofrs/uuid/compare/v5.1.0...v5.2.0
v5.1.0
This release adds a new constant for the Max UUID. Max UUID defined in draft-ietf-uuidrev-rfc4122bis-14 as having maximum values for all bits.
NOTE: Because this feature is part of a draft, it is subject to removal on a minor version of this package if it is removed from a later revision of the RFC.
- Added Max UUID, contributed by
@james-lawrenceFull Changelog: v5.1.0...v5.0.1
v5.0.1
- Fixed an issue with TimestampFromV7 reporting the wrong UUID version in the error message, contributed by
@jaredLundeand@PatrLindFull Changelog: v5.0.1...v5.0.0
Commits
4a2de11Implemented support for checkable errors (#131)fa71420Bump codecov/codecov-action from 2.1.0 to 4.3.1 (#139)5a4bd4bBump actions/upload-artifact from 3.1.3 to 4.3.3 (#140)28d784dBump actions/dependency-review-action from 2.5.1 to 4.3.2 (#138)e76ce7dBump ossf/scorecard-action from 2.0.6 to 2.3.3 (#136)ded6f30Bump actions/checkout from 2.7.0 to 4.1.5 (#137)f77e7ed[StepSecurity] Apply security best practices (#135)0bd0b33Update to RFC 9562 (#117)7930207add max uuid (#129)8ac8ea9Fix TimestampFromV7 error message (#127)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions