fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.4
Metadata
Current evaluation
Renovate PR #106 merged via commit 446c23c, bumping github.com/gabriel-vasile/mimetype v1.4.3 -> v1.4.4 in go.mod/go.sum (pulling golang.org/x/net, x/crypto, x/sys). Superseded by later bumps through v1.4.15 (#638).
Resolution: closed resolved
Reason: The PR itself was merged into main as commit 446c23c ("fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.4 (#106)"), bumping go.mod and go.sum to v1.4.4 with approved review from 2 maintainers. Subsequent Renovate PRs (#165, #270, #297, #380, #449, #498, #550, #638) carried the dependency to v1.4.15.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/gabriel-vasile/mimetype](https://togithub.com/gabriel-vasile/mimetype) | `v1.4.3` -> `v1.4.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>gabriel-vasile/mimetype (github.com/gabriel-vasile/mimetype)</summary>
### [`v1.4.4`](https://togithub.com/gabriel-vasile/mimetype/releases/tag/v1.4.4)
[Compare Source](https://togithub.com/gabriel-vasile/mimetype/compare/v1.4.3...v1.4.4)
#### What's Changed
##### Security fixes:
Update `golang.org/x/net` to latest. Fixes: [CVE-2023-45288](https://deps.dev/advisory/osv/GO-2024-2687)
##### Performance improvements:
- Change tar detection to use checksum instead of legal ranges of values in [https://github.com/gabriel-vasile/mimetype/pull/466](https://togithub.com/gabriel-vasile/mimetype/pull/466)
- ftyp: exit asap to prevent mem allocs in [https://github.com/gabriel-vasile/mimetype/pull/517](https://togithub.com/gabriel-vasile/mimetype/pull/517)
- Improve x-subrip detection performance in [https://github.com/gabriel-vasile/mimetype/pull/524](https://togithub.com/gabriel-vasile/mimetype/pull/524)
- improve performance for text detection in [https://github.com/gabriel-vasile/mimetype/pull/532](https://togithub.com/gabriel-vasile/mimetype/pull/532)
- Using io.ReadAll instead of ioutil.ReadAll by [@​phihungtf](https://togithub.com/phihungtf) in [https://github.com/gabriel-vasile/mimetype/pull/525](https://togithub.com/gabriel-vasile/mimetype/pull/525)
Benchmarks:
```bash
before:
BenchmarkText/application/x-ndjson-8 663314 2027 ns/op 4306 B/op 6 allocs/op
BenchmarkSliceRand-8 688160 1690 ns/op 728 B/op 75 allocs/op
BenchmarkSrt-8 946042 1089 ns/op 4240 B/op 5 allocs/op
after:
BenchmarkText/application/x-ndjson-8 1930292 678.6 ns/op 160 B/op 4 allocs/op
BenchmarkSliceRand-8 1232066 1173 ns/op 160 B/op 4 allocs/op
BenchmarkSrt-8 3235448 368.8 ns/op 64 B/op 2 allocs/op
```
#### New Contributors
- [@​phihungtf](https://togithub.com/phihungtf) made their first contribution in [https://github.com/gabriel-vasile/mimetype/pull/525](https://togithub.com/gabriel-vasile/mimetype/pull/525)
**Full Changelog**: https://github.com/gabriel-vasile/mimetype/compare/v1.4.3...v1.4.4
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #106 merged via commit 446c23c, bumping github.com/gabriel-vasile/mimetype v1.4.3 -> v1.4.4 in go.mod/go.sum (pulling golang.org/x/net, x/crypto, x/sys). Superseded by later bumps through v1.4.15 (#638). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in fetch-service#106 via commit 446c23c, upgrading github.com/gabriel-vasile/mimetype from v1.4.3 to v1.4.4. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated update of github.com/gabriel-vasile/mimetype to v1.4.4, addressing CVE-2023-45288 and improving performance. CI passed, reviewers approved, and changes were merged, also bumping golang.org/x/net, crypto, and sys. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/fetch-service#638
(confidence 90%)
Later Renovate bump of the same dependency to v1.4.15 (commit 6cb60f8); the v1.4.4 pin was temporary and has since been superseded.
-
Related To:
canonical/fetch-service#165
(confidence 85%)
Next mimetype bump in the series (v1.4.5, commit 33f9f72), showing the chain of follow-up dependency updates.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #46 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 | fetch-service | merged | Renovate PR merged as commit 37c5f8d, bumping github.com/gabriel-vasile/mimetype v1.4.2 -> v1.4.3 in go.mod/go.sum (2 files, +5/-3); later superseded by #106 (v1.4.4) and newer bumps. | |
| #498 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.11 | fetch-service | merged | Renovate PR #498 bumping github.com/gabriel-vasile/mimetype from v1.4.10 to v1.4.11 was approved and merged into main as commit 1e5e13d (+3/-1 across go.mod/go.sum). | |
| #550 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.13 | fetch-service | merged | Renovate dependency bump PR merged: github.com/gabriel-vasile/mimetype v1.4.11 -> v1.4.13 in fetch-service via commit 1a7bec7, updating go.mod/go.sum (+3/-1 lines). | |
| #638 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15 | fetch-service | merged | Renovate PR #638 bumped github.com/gabriel-vasile/mimetype v1.4.13 → v1.4.15 in go.mod/go.sum and was merged into main (commit 6cb60f8), pulling the 32-bit int-overflow fix. | |
| #270 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.6 | fetch-service | merged | Renovate dependency bump PR #270 (mimetype v1.4.5 -> v1.4.6) was approved by 2 reviewers and merged into main as commit 49f7382, touching go.mod and go.sum. | |
| #165 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.5 | fetch-service | merged | Merged PR #165 upgraded github.com/gabriel-vasile/mimetype from v1.4.4 to v1.4.5 in commit 33f9f72. | |
| #449 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 | fetch-service | merged | Renovate dependency bump of github.com/gabriel-vasile/mimetype from v1.4.9 to v1.4.10 was approved by 2 reviewers, passed all CI checks, and merged in commit 8946ef7. Later superseded by v1.4.11 (#498), v1.4.13 (#550) and v1.4.15 (#638). | |
| #297 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.8 | fetch-service | merged | Renovate PR #297 merged into main via commit e0b18c5, bumping github.com/gabriel-vasile/mimetype from v1.4.6 to v1.4.8 (APK support, zstd skippable frames, CVE-2024-45338 fix). Later superseded by v1.4.9/v1.4.10/v1.4.11/v1.4.13/v1.4.15. | |
| #380 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.9 | fetch-service | merged | Renovate PR merged as commit 4e75a49, bumping github.com/gabriel-vasile/mimetype from v1.4.8 to v1.4.9 (GLTF support, SRT/JSON perf improvements); all CI checks passed. | |
| #668 fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.16 | fetch-service | open | Renovate-generated dependency update bumping github.com/gabriel-vasile/mimetype from v1.4.15 to v1.4.16. Minimal diff (+3/-1 lines). OSV-scanner CI check is failing; other checks pending. No reviewers assigned yet. |