Skip to content

chore(deps): Bump golang.org/x/sys from 0.49.0 to 0.50.0 - #15010

Open
dependabot[bot] wants to merge 1 commit into
trunkfrom
dependabot/go_modules/golang.org/x/sys-0.50.0
Open

dependabot[bot] wants to merge 1 commit into
trunkfrom
dependabot/go_modules/golang.org/x/sys-0.50.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/sys from 0.49.0 to 0.50.0.

Commits
  • 00227f1 unix: avoid using stale written count from sendfile on freebsd/386 after EINVAL
  • aa1b965 unix: don't skip directory entries with zero inodes on Linux
  • 37845fb unix: reject a short SCM_CREDENTIALS payload in ParseUnixCredentials
  • 313c631 unix: add IoctlGetUint64
  • 4a36a34 cpu: add wasm32 "architecture"
  • 908ab59 windows: use SyscallN consistently for Windows system calls
  • f5cb030 unix: set R12 before the ppc64x syscall branch
  • 0e9e10f windows: remove MemoryBasicInformation.PartitionId field on windows/386
  • 9b24ac0 windows: fix PSAPI_WORKING_SET_EX_BLOCK bit accessors
  • 69a6691 windows/mkwinsyscall: read 32-bit results from the low half of the return reg...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.49.0 to 0.50.0.
- [Commits](golang/sys@v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 10, 2026 14:03
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 10, 2026
@dependabot
dependabot Bot requested a review from tidy-dev November 10, 2026 14:03
@dependabot dependabot Bot added the go Pull requests that update Go code label Nov 10, 2026
Copilot AI balanced review requested due to automatic review settings November 10, 2026 14:03

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Missing upstream dependency source and cross-platform CI results prevent verification of compatibility for Windows syscall changes affecting gh’s file-locking path.

No open issues 🎉

What changed in this PR

Updates GitHub CLI’s golang.org/x/sys dependency from v0.49.0 to v0.50.0, incorporating upstream platform fixes and additions without changing CLI source code.

Changes:

  • Bumps the required module version to v0.50.0.
  • Replaces the module checksums to match the new version.
File Description
go.sum Updates checksums for golang.org/x/sys v0.50.0.
go.mod Requires golang.org/x/sys v0.50.0.

Review effort: Balanced

@cli-triage

cli-triage Bot commented Nov 10, 2026

Copy link
Copy Markdown

Recommendation: Review before merging, Confidence: Medium

The repository patch is limited to the module manifest and checksum entries, and the dependency is a direct requirement whose cpu, unix, windows, and windows/registry packages are compiled into the shipped binary. I could not establish what actually changed upstream or verify that the change is consistent with the claimed bump because the upstream release and commit contents were unavailable through the read-only GitHub tooling. Since the unavailable evidence covers packages that reach production builds, a maintainer should review the upstream changes before merging.

Assessed at head commit b557a2327d684e3e400c59b8d875229074d0d742.

Generated by Dependabot PR Triage (skills-driven) · copilot · gpt56 · ~38 AIC · ⌖ ~5 AIC · ⊞ 18.3K · ◷

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant