Repository navigation
Update Go modules and Playwright - #495
Merged
Merged
Conversation
Bump quic-go 0.64.1, modernc sqlite 1.61.0 (libc 1.79.1), x/net 0.62.0, templ 0.3.1100, cbor 2.10.0, goldmark 1.8.7, govulncheck 1.9.0 and the indirect modules they pull in. Regenerate templ components and notices. a-h/parse stays at templ's pinned version; the newer one breaks templ. Bump the browser tests' Playwright from 1.62.1 to 1.64.1.
This was referenced Oct 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested by Nick · project thread
Rolls up every available minor and patch update. Supersedes #473 (it only had quic-go and sqlite, both included here). No major bumps were available.
Go modules
Direct:
github.com/quic-go/quic-go0.64.0 → 0.64.1 (datagram cancellation and stream reset fixes)modernc.org/sqlite1.60.1 → 1.61.0 (SQLite 3.54.1; busy_timeout waits now stop when the context is done), with its pinnedmodernc.org/libc1.77.1 → 1.79.1golang.org/x/net0.61.0 → 0.62.0github.com/a-h/templ0.3.1070 → 0.3.1100github.com/fxamacker/cbor/v22.9.6 → 2.10.0github.com/yuin/goldmark1.8.6 → 1.8.7Tools:
golang.org/x/vuln1.8.0 → 1.9.0,golang.org/x/tools0.51.0 → 0.52.0,golang.org/x/telemetry.Indirect: brotli 1.2.7, go-humanize 1.1.0, puddle 2.2.3, go-colorable 0.1.16, go-strftime 1.1.0, fwd 1.2.1, msgp 1.6.5.
Held back:
github.com/a-h/parsestays at the version templ 0.3.1100 pins. The newer pseudo-version breaks templ'sjstokenizerbuild.Generated files
*_templ.goregenerated with templ 0.3.1100. The diff is big because the new codegen drops the unusedGetChildrenblock and resolves attributes throughtemplruntime.NewAttributeExpression(...).Resolve(ctx). No.templsource changed.internal/notices/notices.jsonregenerated (sqlite now ships aLICENSE-3RD-PARTY.md).Browser tests
playwright1.62.1 → 1.64.1. CI keys the browser cache on the lockfile, so it downloads the matching Chromium on the first run.Checks
go tool mage verify: passgofmt -l .: cleango test -tags=browser -run TestBrowser ./internal/web: pass (run locally against the container's Chromium)govulncheckcouldn't reach vuln.go.dev from the container; CI runs it.Generated by Claude Code