Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump mvdan.cc/sh/v3 from 3.6.0 to 3.7.0 #587

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 19, 2023

Bumps mvdan.cc/sh/v3 from 3.6.0 to 3.7.0.

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.7.0

This release drops support for Go 1.18 and includes many features and fixes.

  • syntax
    • Correctly parse $foo#bar as a single word - #1003
    • Make &> redirect operators an error in POSIX mode - #991
    • Avoid producing invalid shell when minifying some heredocs - #923
    • Revert the simplification of ${foo:-} into ${foo-} - #970
  • interp
    • Add ExecHandlers to support layering multiple middlewares - #964
    • Add initial support for the select clause - #969
    • Support combining the errexit and pipefail options - #870
    • Set EUID just like UID - #958
    • Replace panics on unimplemented builtins with errors - #999
    • Tweak build tags to support building for js/wasm - #983
  • syntax/typedjson
    • Avoid reflect.Value.MethodByName to reduce binary sizes - #961

A special thanks to all the contributors to this release! @​riacataquian @​anderbubble @​teefill @​diamondburned

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.20.5 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.7.0"

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

[3.7.0] - 2023-06-18

  • syntax
    • Correctly parse $foo#bar as a single word - #1003
    • Make &> redirect operators an error in POSIX mode - #991
    • Avoid producing invalid shell when minifying some heredocs - #923
    • Revert the simplification of ${foo:-} into ${foo-} - #970
  • interp
    • Add ExecHandlers to support layering multiple middlewares - #964
    • Add initial support for the select clause - #969
    • Support combining the errexit and pipefail options - #870
    • Set EUID just like UID - #958
    • Replace panics on unimplemented builtins with errors - #999
    • Tweak build tags to support building for js/wasm - #983
  • syntax/typedjson
    • Avoid reflect.Value.MethodByName to reduce binary sizes - #961
Commits
  • d3fa147 prepare for v3.7.0
  • 799b04f cmd/shfmt: bump Dockerfile image versions
  • 604134b CHANGELOG: start the release notes for v3.7.0
  • 6093166 syntax: stop embedding Pos in error struct types
  • dfc1441 all: assume C.UTF-8 is available in the tests
  • 6f8f5d9 syntax: treat &> as an error in POSIX mode
  • 2c8e83c syntax: run "confirm" shell commands in a temp dir
  • 829b814 syntax: don't parse $foo#bar as a comment
  • 39a33f6 all: apply minor suggestions from gopls
  • 5e44798 syntax: add TODO about writer methods on Printer
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 19, 2023
Bumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.6.0...v3.7.0)

---
updated-dependencies:
- dependency-name: mvdan.cc/sh/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/mvdan.cc/sh/v3-3.7.0 branch from 1d125de to d339b6c Compare July 9, 2023 09:18
@sonarcloud
Copy link

sonarcloud bot commented Jul 9, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants