Skip to content

chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 - #5140

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.15
Closed

chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15#5140
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15.

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.15 fix int overflow on 32bit arch

What's Changed

This release fixes an integer overflow panic on 32 bit architectures and retracts the previous release.

Full Changelog: gabriel-vasile/mimetype@v.1.4.14...v1.4.15

v1.4.14 pyc, pcap, cycloned, gedcom support

Media type changes

  • newly added: application/x-bytecode.python, application/vnd.tcpdump.pcap, application/vnd.cyclonedx+xml, application/vnd.cyclonedx+json, text/vnd.familysearch.gedcom
  • superseded and demoted to aliases: image/vnd.mozilla.apng superseded by image/apng video/x-matroska superseded by video/matroska application/x-rar-compressed superseded by application/vnd.rar

Full changelog

New Contributors

Full Changelog: gabriel-vasile/mimetype@v1.4.13...v1.4.14

v1.4.14-rc1 pyc, pcap, cycloned support

... (truncated)

Commits
  • f6bb955 readme: add back contributing section, for #827 (#831)
  • 1b3ab2e fuzz: fuzz for 32 bit too to avoid panics like #829 (#830)
  • 38e5e71 cdf: fix slice index panic on 32bit arch (#829)
  • bcd718d gedcom: add support for text/vnd.familysearch.gedcom (#789)
  • 2995287 build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 14cefcb fuzz: improvements for exploring more code paths (#824)
  • 5b11e3a scan: fix panic and fuzz flags (#823)
  • 5621f29 charset: stop checking for ascii if utf8 is satisfied (#768)
  • eb8d3f4 docs: mention String() can return different values (#820)
  • 9268756 mkv: use IANA registered media type video/matroska (#819)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies go Pull requests that update Go code labels Jul 31, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 31, 2026 00:45
@dependabot dependabot Bot added dependencies go Pull requests that update Go code labels Jul 31, 2026
@netlify

netlify Bot commented Jul 31, 2026

Copy link
Copy Markdown

Deploy Preview for zarf-docs canceled.

Name Link
🔨 Latest commit f2b86d0
🔍 Latest deploy log https://app.netlify.com/projects/zarf-docs/deploys/6a848d13356d0d0008621af9

@brandtkeller

Copy link
Copy Markdown
Member

Before accepting this PR I am evaluating these based on what function they serve. This dependency is used solely by the pull logic for a package from http/https. The file has already been downloaded and we're detecting the file type extension. IMO the existing archives dependency holds better fidelity of the contract is merely .tar/.tar.zst.

Otherwise the alternative would be removing the http/https pull all-together but that feels a bit extreme.

Thoughts @zarf-dev/maintainers / @zarf-dev/reviewers ?

@AustinAbro321

AustinAbro321 commented Aug 7, 2026

Copy link
Copy Markdown
Member

@brandtkeller Yeah, I think we can replace this with the archives filetype detection

It would still be an in-direct dependency, but that's a still a win IMO.

@soltysh

soltysh commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Totally agree with minimizing our deps surface.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.15 branch from c1b4ea7 to 9e28db3 Compare August 18, 2026 14:46
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.13 to 1.4.15.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.13...v1.4.15)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.15 branch from 9e28db3 to f2b86d0 Compare August 18, 2026 16:49
@brandtkeller

Copy link
Copy Markdown
Member

Closing this as the updates should now be resolved from the direct dependency.

@github-project-automation github-project-automation Bot moved this to Done in Zarf Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.15 branch August 18, 2026 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies go Pull requests that update Go code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants