deps: bump github.com/yuin/goldmark from 1.8.5 to 1.8.6 in the go-dependencies group

Merged
DE
2mo ago
+6-6

Bumps the go-dependencies group with 1 update: github.com/yuin/goldmark.

Updates github.com/yuin/goldmark from 1.8.5 to 1.8.6

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.6

  • fix(extension): fix #571
  • Merge pull request #569
Commits
  • e3e8a53 Merge pull request #569 from binggao1230/fix-urlescape-percent-hex-guard
  • 8701257 Merge pull request #570 from BananaJeanss/patch-1
  • c52d4b3 fix(extension): fix #571
  • 37b454c Remove Go Report Card badge
  • 72f79b9 fix: URLEscape dropped a truncated utf8 leading byte
  • 67a4ecf fix: URLEscape validated the same hex digit twice
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates github.com/yuin/goldmark to v1.8.6, a patch release that fixes URL escaping bugs that could drop truncated UTF-8 leading bytes and validate the same hex digit twice. Also bumps govulncheck to v1.7.0 and the Go toolchain to 1.26.6.