Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 22, 2025

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/image v0.30.0 -> v0.32.0 age confidence

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Sep 22, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.24.0
golang.org/x/text v0.28.0 -> v0.30.0

@github-actions
Copy link
Contributor

github-actions bot commented Sep 22, 2025

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

  • Routine Dependency Updates: Both v0.31.0 and v0.32.0 are maintenance releases focusing on updating golang.org/x dependencies to their latest tagged versions
  • Performance Improvements: Added fast paths for RGBA64Image in the draw package, providing significant performance gains for scaling operations
  • Security Enhancements: TIFF parser now validates palette indices to prevent panics from corrupt/malicious images (addresses GHSA-q7pp-wcgr-pffx)
  • Image Format Support: Enhanced BMP decoder support for 1, 2, and 4 bits-per-pixel palettes; improved WebP handling to prevent unexpected memory usage
  • Go Version Update: Updated Go directive from 1.18 to maintain compatibility with modern Go versions

🎯 Impact Scope Investigation

  • Primary Usage: The codebase uses golang.org/x/image/draw package in internal/gat/gat.go:225 for image scaling operations
  • Specific Function: Uses draw.ApproxBiLinear.Scale() for resizing images before Sixel encoding (line 225)
  • Standard Library Imports: Also imports standard image package for basic image operations
  • No Breaking Changes: The draw package API remains backward compatible; ApproxBiLinear scaling method is unchanged
  • Indirect Dependencies: Update also pulls in golang.org/x/text v0.30.0, which maintains compatibility

💡 Recommended Actions

  • Safe to Merge: No code modifications required - all existing API calls remain compatible
  • Performance Benefit: The update includes performance optimizations for RGBA64 images that may improve gat's image processing speed
  • Security Improvement: TIFF validation enhancements provide additional protection against malformed images
  • Testing: Standard testing with go test ./... should confirm compatibility (no breaking changes expected)

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

@renovate renovate bot force-pushed the renovate/golang.org-x-image-0.x branch 3 times, most recently from 9511ea1 to 00221e1 Compare October 4, 2025 07:22
@renovate renovate bot force-pushed the renovate/golang.org-x-image-0.x branch from 00221e1 to 2c16c4c Compare October 11, 2025 16:55
@renovate renovate bot changed the title fix(deps): update module golang.org/x/image to v0.31.0 fix(deps): update module golang.org/x/image to v0.32.0 Oct 11, 2025
@koki-develop koki-develop merged commit 18b9cee into main Nov 14, 2025
5 checks passed
@koki-develop koki-develop deleted the renovate/golang.org-x-image-0.x branch November 14, 2025 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants