[tools]: Bump the all-tools group across 1 directory with 3 updates by dependabot[bot] · Pull Request #34 · ifnotnil/opt

dependabot · 2026-05-05T01:40:01Z

Bumps the all-tools group with 2 updates in the /tools directory: github.com/golangci/golangci-lint/v2 and mvdan.cc/gofumpt.

Updates github.com/golangci/golangci-lint/v2 from 2.11.4 to 2.12.1

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.12.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

[!IMPORTANT] If you are using the install script from the master branch: https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh This branch is not used anymore, we are using main.

We recommend using https://golangci-lint.run/install.sh as URL to install golangci-lint.

https://golangci-lint.run/docs/welcome/install/local/#binaries

35b2189782a6a059489289257e6523550167cb64 fix: install.sh script (#6539)

3a006ab284f52a5aac0a7daa77ae683e43fb7b69 gomodguard: fix panic with migration suggestion (#6542)

v2.12.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

[!IMPORTANT] If you are using the install script from the master branch: https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh This branch is not used anymore, we are using main.

We recommend using https://golangci-lint.run/install.sh as URL to install golangci-lint.

https://golangci-lint.run/docs/welcome/install/local/#binaries

d092dad51011497cda6dfcdeac572e87e7e00f79 Bump github.com/jingyugao/rowserrcheck from v1.1.1 to c5f79b8 (#6510)

eec5c47e4a7a7e15fb0989cad1d6e41bf1b29c4b build(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 (#6535)

c670072b84808b392e04e9fa8b77355c99b7d4c0 build(deps): bump github.com/alecthomas/chroma/v2 from 2.23.1 to 2.24.1 (#6534)

493a1c881dad24cbe5fba5c2c8a1199ca383bb2c build(deps): bump github.com/ashanbrown/forbidigo/v2 from 2.3.0 to 2.3.1 (#6502)

3ad7eac33ff388240568f0fd0cccb2631e36f85d build(deps): bump github.com/ashanbrown/makezero/v2 from 2.1.0 to 2.2.0 (#6492)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.12.1

Released on 2026-05-01

Linters bug fixes

gomodguard_v2: fix panic with migration suggestion

Misc.

fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Released on 2026-05-01

New linters

Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter

Linters new features or changes

dupl: from f665c8d69b32 to c99c5cf5c202 (extended detection)

funcorder: from 0.5.0 to 0.6.0 (new option: function)

goconst: add an option to ignore strings from tests

goconst: from 1.8.2 to 1.10.0 (extended detection)

gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)

gosec: from 619ce2117e08 to 2.26.1 (new checks: G124, G708, G709, G710)

govet: add inline analyzer

makezero: from 2.1.0 to 2.2.1 (support slice type aliases)

paralleltest: expose checkcleanup option

sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)

wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)

Linters bug fixes

forbidigo: from 2.3.0 to 2.3.1

godot: from 1.5.4 to 1.5.6

govet-modernize: from 0.43.0 to 0.44.0

ireturn: from 0.4.0 to 0.4.1

rowserrcheck: from 1.1.1 to c5f79b8

Misc.

Decrease cache entropy

Embed the JSON schema in the binary

Filter env vars when cloning the repository with the custom command

Commits

9aa24e9 chore: prepare release
3a006ab gomodguard: fix panic with migration suggestion (#6542)
35b2189 fix: install.sh script (#6539)
6349bbc docs: update GitHub Action assets (#6538)
7761527 chore: prepare release
8116fb5 build(deps): bump github.com/bombsimon/wsl/v5 from 5.6.0 to 5.8.0 (#6536)
eec5c47 build(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 (#6535)
c670072 build(deps): bump github.com/alecthomas/chroma/v2 from 2.23.1 to 2.24.1 (#6534)
80ad1dc feat: embed the JSON schema in the binary (#6533)
8589d80 build(deps): bump github.com/securego/gosec/v2 from 2.25.0 to 2.26.1 (#6532)
Additional commits viewable in compare view

Updates golang.org/x/tools from 0.43.0 to 0.44.0

Commits

3dd188d go.mod: update golang.org/x dependencies
aebd870 gopls: improve doc link matching to support links followed by a colon
5357b43 go/analysis/passes/modernize: rangeint: handle type parameter constraints
bf04c61 go/types/internal/play: show normal terms of selected type
0ae2de0 gopls/internal/filecache: cache decoded objects in memCache
8e51a5f go/ssa: support direct references to embedded fields in struct lit
5005b9e internal/gcimporter: rename ureader_yes.go to ureader.go
5ca865b go/types/objectpath: add debugging command
f6476fb internal/gcimporter: consume generic methods in gcimporter
b36d1d1 internal/pkgbits: sync version.go with goroot
Additional commits viewable in compare view

Updates mvdan.cc/gofumpt from 0.9.2 to 0.10.0

Release notes

Sourced from mvdan.cc/gofumpt's releases.

v0.10.0

This release is based on Go 1.26's gofmt, and requires Go 1.25 or later.

A new rule is introduced to drop unnecessary parentheses around expressions where the inner expression is unambiguous on its own, such as f((3)). Parentheses are kept where they are useful, such as on binary expressions. See #44.

A new rule is introduced to require multi-line function calls to match the opening and closing parenthesis in terms of the use of newlines. See #74.

The -extra flag now accepts a comma-separated list of rule names to enable individual extra rules, rather than enabling all of them at once. See #339.

The following changes are included as well:

Avoid crashing on go.mod files without a module directive - #350

Avoid failing when an ignored directory cannot be read - #351

Avoid prefixing more kinds of commented-out Go code with spaces - #230

Avoid prefixing a shebang comment with a space - #237

Narrow the newlines on assignments rule to ignore complex cases - #354

Fix three bugs which caused a second gofumpt run to make changes - #132, #345

Binaries built on go version go1.26.2 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release! New tiers with rewards are available as well.

Changelog

Sourced from mvdan.cc/gofumpt's changelog.

[v0.10.0] - 2026-05-04

This release is based on Go 1.26's gofmt, and requires Go 1.25 or later.

A new rule is introduced to drop unnecessary parentheses around expressions where the inner expression is unambiguous on its own, such as f((3)). Parentheses are kept where they are useful, such as on binary expressions. See #44.

A new rule is introduced to require multi-line function calls to match the opening and closing parenthesis in terms of the use of newlines. See #74.

The -extra flag now accepts a comma-separated list of rule names to enable individual extra rules, rather than enabling all of them at once. See #339.

The following changes are included as well:

Avoid crashing on go.mod files without a module directive - #350

Avoid failing when an ignored directory cannot be read - #351

Avoid prefixing more kinds of commented-out Go code with spaces - #230

Avoid prefixing a shebang comment with a space - #237

Narrow the newlines on assignments rule to ignore complex cases - #354

Fix three bugs which caused a second gofumpt run to make changes - #132, #345

[v0.9.1] - 2025-09-07

This is a bugfix release to address a regression in detecting comment directives with special characters such as //golangcitest:config_path.

[v0.9.0] - 2025-09-02

This release is based on Go 1.25's gofmt, and requires Go 1.24 or later.

A new rule is introduced to "clothe" naked returns for the sake of clarity. While there is nothing wrong with naming results in function signatures, using lone return statements can be confusing to the reader.

Go 1.25's ignore directives in go.mod files are now obeyed; any directories within the module matching any of the patterns are now omitted when walking directories, such as with gofumpt -w ..

Module information is now loaded via Go's x/mod/modfile package rather than executing go mod edit -json, which is way faster. This should result in moderate speed-ups when formatting many directories.

[v0.8.0] - 2025-04-13

This release is based on Go 1.24's gofmt, and requires Go 1.23 or later.

The following changes are included:

... (truncated)

Commits

1405025 CHANGELOG: add entry for v0.10.0
3e7fd1f format: narrow scope of newline-after-assignment rule
64a87f4 format: leave shebang comments on the first line alone
529740e format: align opening and closing parens in multi-line calls
a7ca065 format: add empty line after trailing inline comment between decls
018b5c8 format: re-sort imports after joining adjacent single-line decls
d9b8a3c format: separate adjacent long func decls with a blank line
de56e49 format: detect commented-out code by parsing as Go
e476e62 testdata: add cases showing the commented-code heuristic limits
ba22a6d format: remove definitely useless parentheses
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-tools group with 2 updates in the /tools directory: [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) and [mvdan.cc/gofumpt](https://github.com/mvdan/gofumpt). Updates `github.com/golangci/golangci-lint/v2` from 2.11.4 to 2.12.1 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md) - [Commits](golangci/golangci-lint@v2.11.4...v2.12.1) Updates `golang.org/x/tools` from 0.43.0 to 0.44.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.43.0...v0.44.0) Updates `mvdan.cc/gofumpt` from 0.9.2 to 0.10.0 - [Release notes](https://github.com/mvdan/gofumpt/releases) - [Changelog](https://github.com/mvdan/gofumpt/blob/master/CHANGELOG.md) - [Commits](mvdan/gofumpt@v0.9.2...v0.10.0) --- updated-dependencies: - dependency-name: github.com/golangci/golangci-lint/v2 dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-tools - dependency-name: golang.org/x/tools dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-tools - dependency-name: mvdan.cc/gofumpt dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-tools ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 5, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[tools]: Bump the all-tools group across 1 directory with 3 updates#34

[tools]: Bump the all-tools group across 1 directory with 3 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/tools/all-tools-1173d77a8d

dependabot Bot commented on behalf of github May 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.12.1

Changelog

v2.12.0

Changelog

v2.12.1

v2.12.0

v0.10.0

[v0.10.0] - 2026-05-04

[v0.9.1] - 2025-09-07

[v0.9.0] - 2025-09-02

[v0.8.0] - 2025-04-13

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 5, 2026 •

edited

Loading