Repository navigation
build(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 - #41
Merged
bomly-guy merged 1 commit intoMay 12, 2026
Conversation
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/Masterminds/semver/releases) - [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md) - [Commits](Masterminds/semver@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: github.com/Masterminds/semver/v3 dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
bomly-guy
deleted the
dependabot/go_modules/github.com/Masterminds/semver/v3-3.5.0
branch
May 12, 2026 07:44
bomly-guy
added a commit
that referenced
this pull request
Sep 5, 2026
#427) v0.9.1 carries the three fixes that followed the union release, two of them against defects filed from this repo's review of v0.9.0: #40 PropagateScopes stands down when the root is absent, instead of stamping every unscoped dependency runtime -- the CLI calls it through detectorkit on every Python lockfile graph #41 a generic fallback identity keeps its ecosystem when reconstructed from the package URL alone #42 the component descriptor name is bounded No golden moves: both behavioural fixes address shapes the fixtures do not produce -- a caller holding a pre-promotion root ID, and a fallback identity round-tripped through its purl. Verified with the full smoke suite, Python cases included. The release note in both guides described something the repository does not do. It said draft releases are created automatically on merge to main, with the bump chosen by commit prefix, so a `feat!:` squash title would make the next release major. Nothing does that: Release fires only on a pushed `v*.*.*` tag, and Auto Version is workflow_dispatch with the bump as an explicit dropdown. The description now matches the workflows, and says plainly that the bump is a decision someone makes rather than a consequence of a commit title -- which is exactly the wrong conclusion the old text invites. Co-authored-by: Claude Opus 5 <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0.
Release notes
Sourced from github.com/Masterminds/semver/v3's releases.
Changelog
Sourced from github.com/Masterminds/semver/v3's changelog.
Commits
8b89c86Merge pull request #287 from mattfarina/fix-da-issues29d51d0Fixing some quality issues87f651dMerge pull request #286 from mattfarina/update-devcontainer158a685Updating gitignore for devcontainers7e83c08Merge pull request #284 from Masterminds/dependabot/github_actions/golangci/g...697e27fMerge pull request #283 from Masterminds/dependabot/github_actions/actions/ca...1591f8eMerge pull request #282 from Masterminds/dependabot/github_actions/github/cod...3f5ff17Bump golangci/golangci-lint-action from 7.0.1 to 9.2.004baa33Bump actions/cache from 4.2.3 to 5.0.545939feBump github/codeql-action from 4.35.1 to 4.35.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)