Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 27, 2023

Bumps github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0.

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.11.0

What's Changed

New Contributors

Full Changelog: go-git/go-git@v5.10.1...v5.11.0

v5.10.1

What's Changed

New Contributors

Full Changelog: go-git/go-git@v5.10.0...v5.10.1

v5.10.0

What's Changed

... (truncated)

Commits
  • 5d08d3b Merge pull request #958 from pjbgf/workval
  • 5bd1d8f build: Ensure checkout is the first operation
  • b2c1982 git: worktree, Align validation with upstream rules
  • cec7da6 Merge pull request #953 from pjbgf/alternates
  • 8b47ceb storage: filesystem, Add option to set a specific FS for alternates
  • 4f61489 Merge pull request #941 from djmoch/filestats-rename
  • ae552ce Merge pull request #939 from dhoizner/fix-pull-after-shallow
  • cc1895b Merge pull request #950 from aymanbagabas/validate-ref
  • de1d5a5 git: validate reference names
  • d87110b Merge pull request #948 from go-git/dependabot/go_modules/cli/go-git/github.c...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.11.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.4.2...v5.11.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 27, 2023
@jrepp
Copy link

jrepp commented Nov 8, 2025

This PR is no longer needed. The main branch has already been updated to github.com/go-git/go-git/v5 v5.16.3, which is newer than the v5.11.0 version this PR was trying to update to.

Additionally, the test failures that would have occurred on this PR have been resolved on main by updating the test code to use HEAD instead of hardcoded master branch references.

@jrepp
Copy link

jrepp commented Nov 8, 2025

CI Issue Analysis

This PR is based on an older version of the codebase and would fail CI tests due to git branch compatibility issues that have since been fixed on main.

Current Status

  • This PR: Attempts to update github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0
  • Main branch: Already has github.com/go-git/go-git/v5 v5.16.3 (newer version)

Test Failures

The tests on this branch fail with:

fatal: ambiguous argument 'master': unknown revision or path not in the working tree.

This issue has been fixed on main by updating the test code to use HEAD instead of hardcoded master branch references (see testing/test_proxy_server.go).

Recommendation

This PR can be closed as the dependency has already been updated to a newer version on main, and the underlying test issues have been resolved.

@jrepp
Copy link

jrepp commented Nov 8, 2025

Merge Status Update

I've attempted to merge main into this PR branch to resolve conflicts, but I don't have permissions to push to the upstream dependabot branch.

Analysis

Recommendation

This PR should be closed because:

  1. It attempts to update to an older version than what's already on main
  2. It has no unique contributions beyond the automated dependency update
  3. The dependency and test fixes are already present on main

The PR can be safely closed without merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant