Skip to content

chore(deps): Bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2#477

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/go-playground/validator/v10-10.30.2
Open

chore(deps): Bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2#477
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/go-playground/validator/v10-10.30.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2.

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.2

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.1...v10.30.2

Commits
  • b9258bd fix(fqdn): allow hyphens in last domain label (#1548)
  • b9f1d79 feat: add postcode patterns for Colombia (CO) and British Virgin Islands (VG)...
  • 7fa9599 chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 (#1546)
  • 8ca29ec chore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 (#1545)
  • 5e1bedf docs: add Valuer interface documentation and example (#1540)
  • 42927a0 feat: implement ValidatorValuer interface feature (#1416)
  • c254ece docs: fix typos (#1527)
  • 4325386 fix: prevent panic in unique validation with nil pointer elements (#1532)
  • d3f35da Go 1.26 support (#1535)
  • f5c74ce chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#1533)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade github.com/go-playground/validator/v10 to 10.30.2 and set the module to Go 1.25. This brings validation fixes and updates security-sensitive deps.

  • Dependencies

    • github.com/go-playground/validator/v10 10.30.1 → 10.30.2 (fixes panic in unique with nil pointers, improves fqdn, adds ValidatorValuer and new rules).
    • Set go to 1.25.0 and refresh indirect deps for compatibility/security: github.com/gabriel-vasile/mimetype 1.4.13; golang.org/x/crypto 0.49.0; golang.org/x/sync 0.20.0; golang.org/x/{mod,net,sys,term,text,tools} latest minors.
  • Migration

    • Use Go 1.25 in local dev and CI.
    • Run tests, especially around validations using unique and fqdn.

Written for commit 6f2cbe6. Summary will update on new commits.

Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.30.1 to 10.30.2.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.30.1...v10.30.2)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 6, 2026 18:34
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="go.mod">

<violation number="1" location="go.mod:3">
P1: This dependency bump also raises the module’s minimum Go version to 1.25 and drops the toolchain pin, which can break builds still using the project’s current Go 1.24 setup. Keep the previous Go directive/toolchain unless this PR is intentionally a Go-version upgrade.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

go 1.24.0

toolchain go1.24.1
go 1.25.0
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot Apr 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: This dependency bump also raises the module’s minimum Go version to 1.25 and drops the toolchain pin, which can break builds still using the project’s current Go 1.24 setup. Keep the previous Go directive/toolchain unless this PR is intentionally a Go-version upgrade.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At go.mod, line 3:

<comment>This dependency bump also raises the module’s minimum Go version to 1.25 and drops the toolchain pin, which can break builds still using the project’s current Go 1.24 setup. Keep the previous Go directive/toolchain unless this PR is intentionally a Go-version upgrade.</comment>

<file context>
@@ -1,8 +1,6 @@
-go 1.24.0
-
-toolchain go1.24.1
+go 1.25.0
 
 require (
</file context>
Fix with Cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants