build(deps): bump golang.org/x/image from 0.45.0 to 0.46.0 - #112
Merged
donislawdev merged 2 commits intoSep 22, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.45.0 to 0.46.0. - [Commits](golang/image@v0.45.0...v0.46.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
x/image 0.46.0 changes no Go file at all - its own go.mod asks for x/text 0.42.0 and x/sys 0.48.0, which is why this pull request carries #111 whole. x/text's change is in unicode/norm, which this project uses only to compare two names and never to write one, so no generated byte moves. Every byte stability guard was green on three systems in the bot's own CI run. The only red was the notices file, which names versions by hand, and it now says 0.42.0, 0.46.0 and 0.48.0. Measured on the two copies in the module cache rather than read from release notes: x/sys adds one Windows constant, x/image/webp still holds a decoder and no encoder, so the claim in webp.go stands at 0.46.0. The comment in dependabot.yml said every bump is checked locally with the full suite before it is accepted. The owner's decision of 2026-09-22 has the full suite run in CI on the pull request instead, on three systems, and the sentence now says what is still read by hand. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
donislawdev
force-pushed
the
dependabot/go_modules/golang.org/x/image-0.46.0
branch
from
September 22, 2026 06:48
3264495 to
0965273
Compare
donislawdev
deleted the
dependabot/go_modules/golang.org/x/image-0.46.0
branch
September 22, 2026 07:04
donislawdev
added a commit
that referenced
this pull request
Sep 22, 2026
…t speaks as a note (#117) * ci: the import table is read by a job of its own, and the second start speaks as a note Two items of the owner's queue, both about the software renderer. The guard that builds the window with cgo and reads its PE import table was the test matrix's only cold cgo build: CGO_ENABLED is 0 there, so nothing else compiles the OpenGL binding or GLFW. Measured 2026-09-17, 822 s for the Windows test step against 434 s warm, four minutes under the timeout, and cold again after every change to go.sum - which is every Dependabot pull request. It runs in a job of its own now, with a cache of its own, and the matrix asks it to skip by a variable declared once in the guard's source. A skip is the shape this project has been caught by: a guard that stops reaching the state it watches and is green honestly. So the job reads its log for the test's PASS line under pipefail - go test with a -run pattern matching nothing exits 0, and so does a skip on a runner without gcc, both measured - and a new guard reads the test's name and the variable out of the guard's own source and holds ci.yml to both halves. Three mutations for it, and the notices mutation that #112 left stale points at the built version again. The line written to standard error before the second start said the driver offers no OpenGL 2.1 as a fact. The program has checked only that the first attempt gave no window, so the line says that, names the usual cause as usual, and says what is being done - the owner's decision of 2026-09-17. Rejected: leaving the guard in the matrix with the measured four minutes of room, because a runner thirty percent slower turns that into a timeout that names whichever test happened to be running. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * ci: two things an outside review of #117 asked for The wording guard. TestTheSecondAttemptIsTakenOnlyWhereTheRendererCanBe reads the expected line from the function it tests, so a revert of the new wording would leave it green. TestTheSecondStartSpeaksAsANoteNotAFinding holds the words that make the line a note rather than a finding, with a mutation that puts the old sentence back. persist-credentials: false on the checkout of the import table job. The checkout keeps the token in .git/config unless told not to, and the job runs go test over the pull request's own code. The other twenty-two checkouts in these workflows are the same shape and are O230, a change of their own. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps golang.org/x/image from 0.45.0 to 0.46.0.
Commits
b06f1dego.mod: update golang.org/x dependencies09b0b4fall: upgrade go directive to at least 1.26.0 [generated]Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)