spotify · lucasvanbriemen

dependabot[bot] commented 2 months ago

Bumps thruster from 0.1.21 to 0.1.25.

Changelog

v0.1.25 / 2026-08-11

Bypass all uncacheable requests (#142)

v0.1.24 / 2026-08-11

Use struct types as cache keys

v0.1.23 / 2026-07-16

Build with Go 1.26.5 (#140)

v0.1.22 / 2026-06-29

Build with Go 1.26.4

Exclude image types from compression (#137)

Commits

343c415 Bump version
0b8f646 Merge pull request #142 from basecamp/avoid-hits-from-uncacheable-requests
9b084d4 Bypass all uncacheable requests
e38276c Bump version
5a6ae0f Merge commit from fork
71e703d Bump the github-actions group across 1 directory with 5 updates (#133)
900411c Merge pull request #140 from rafafloresta/bump-go-1.26.5-security
2eb7870 Bump Go to 1.26.5 to fix crypto/tls ECH de-anonymization (CVE-2026-42505)
3acd601 Merge pull request #138 from basecamp/version-0.1.22
43dfae9 Version 0.1.22
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Edit description

Bumps [thruster](https://github.com/basecamp/thruster) from 0.1.21 to 0.1.25.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/basecamp/thruster/blob/main/CHANGELOG.md">thruster's changelog</a>.</em></p>
<blockquote>
<h2>v0.1.25 / 2026-08-11</h2>
<ul>
<li>Bypass all uncacheable requests (<a href="https://redirect.github.com/basecamp/thruster/issues/142">#142</a>)</li>
</ul>
<h2>v0.1.24 / 2026-08-11</h2>
<ul>
<li>Use struct types as cache keys</li>
</ul>
<h2>v0.1.23 / 2026-07-16</h2>
<ul>
<li>Build with Go 1.26.5 (<a href="https://redirect.github.com/basecamp/thruster/issues/140">#140</a>)</li>
</ul>
<h2>v0.1.22 / 2026-06-29</h2>
<ul>
<li>Build with Go 1.26.4</li>
<li>Exclude image types from compression (<a href="https://redirect.github.com/basecamp/thruster/issues/137">#137</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/basecamp/thruster/commit/343c4154dbd8102a4050a2306a644c06f7945f3a"><code>343c415</code></a> Bump version</li>
<li><a href="https://github.com/basecamp/thruster/commit/0b8f6460893e70dd5f59f674fbe6804433b51905"><code>0b8f646</code></a> Merge pull request <a href="https://redirect.github.com/basecamp/thruster/issues/142">#142</a> from basecamp/avoid-hits-from-uncacheable-requests</li>
<li><a href="https://github.com/basecamp/thruster/commit/9b084d4dd7fc6b4de419db073812019adc3579cd"><code>9b084d4</code></a> Bypass all uncacheable requests</li>
<li><a href="https://github.com/basecamp/thruster/commit/e38276c05c7cf1b21ddd4b0c6fbebd8160e43c77"><code>e38276c</code></a> Bump version</li>
<li><a href="https://github.com/basecamp/thruster/commit/5a6ae0fee486fe2af3f642feb329af5363f98915"><code>5a6ae0f</code></a> Merge commit from fork</li>
<li><a href="https://github.com/basecamp/thruster/commit/71e703d7a1147e0a0731db0069de8f9eb5fcdc4f"><code>71e703d</code></a> Bump the github-actions group across 1 directory with 5 updates (<a href="https://redirect.github.com/basecamp/thruster/issues/133">#133</a>)</li>
<li><a href="https://github.com/basecamp/thruster/commit/900411c0dbc3541dd9f4f23a4e8430eb57eeff1c"><code>900411c</code></a> Merge pull request <a href="https://redirect.github.com/basecamp/thruster/issues/140">#140</a> from rafafloresta/bump-go-1.26.5-security</li>
<li><a href="https://github.com/basecamp/thruster/commit/2eb78700f004a492cc003bf74bd0def767b85057"><code>2eb7870</code></a> Bump Go to 1.26.5 to fix crypto/tls ECH de-anonymization (CVE-2026-42505)</li>
<li><a href="https://github.com/basecamp/thruster/commit/3acd601a28a6e3fe96f39c6668d4b6b0fbc6c6e6"><code>3acd601</code></a> Merge pull request <a href="https://redirect.github.com/basecamp/thruster/issues/138">#138</a> from basecamp/version-0.1.22</li>
<li><a href="https://github.com/basecamp/thruster/commit/43dfae91ff5466b18cb4af19c6f86b291bfd3ff9"><code>43dfae9</code></a> Version 0.1.22</li>
<li>Additional commits viewable in <a href="https://github.com/basecamp/thruster/compare/v0.1.21...v0.1.25">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=thruster&package-manager=bundler&previous-version=0.1.21&new-version=0.1.25)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Milestone

Labels

Assignees

Reviewers

Linked items

Projects

Bump thruster from 0.1.21 to 0.1.25

v0.1.25 / 2026-08-11

v0.1.24 / 2026-08-11

v0.1.23 / 2026-07-16

v0.1.22 / 2026-06-29