Repository navigation
tools: github.com/forkcloser/dot v1.1.1 - #91
Merged
Merged
Conversation
The dot tool moves from v1.0.1 to v1.1.1, as in the other forkcloser repositories: forkcloser/go-graphviz in place of goccy's, which drops disintegration/imaging (and its unpatched advisory) from the tools module, and v0.3.1's raster fixes. Renovate holds the same bump rate-limited on its dashboard. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: closer-claudio <claudio@farcloser.world>
closer-claudio
commented
Oct 7, 2026
closer-claudio
left a comment
closer-claudio
left a comment
Author
There was a problem hiding this comment.
✅ Ready at b0d2bf9: the tools module takes forkcloser/dot v1.1.1 (go-graphviz v0.3.1), the version every other repository runs, which drops goccy/go-graphviz and disintegration/imaging and clears the known low imaging alert here.
📝 Note
- dot v1.1.1's evidence is on forkcloser/dot#49: real pprof graphs rendered with labels inside their boxes. In this module it is a lint-time tool, never shipped.
- Apart from this bump, xz's tools module is limen v0.8.0's except
golang.org/x/toolsv0.50.0 (limen: v0.51.0) and itsx/telemetry, a separate Renovate bump.
🔍 Verified last
- The
go.sumlines for dot v1.1.1 and go-graphviz v0.3.1 match https://sum.golang.org/lookup/github.com/forkcloser/dot@v1.1.1 and …/go-graphviz@v0.3.1. tools/go.modno longer requiresgoccy/go-graphviz,disintegration/imagingorflopp/go-findfont, and the diff touches onlytools/go.modandtools/go.sum.- b0d2bf9 is signed.
apostasie
approved these changes
Oct 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🎯 Why: limen v0.8.0 sync, cleanup (@apostasie). xz's tools module still pinned dot v1.0.1, which pulls in disintegration/imaging and its unpatched advisory. The other forkcloser repositories are on v1.1.1.
🛠️ What:
go get github.com/forkcloser/dot@v1.1.1andgo mod tidyin tools/.🧪 How:
just lintandjust testgreen locally.📝 Renovate has the same bump rate-limited on the dependency dashboard. When this merges, that entry becomes moot.