change yaml library to go.yaml.in/yaml/v3 by boekkooi-impossiblecloud · Pull Request #1772 · stretchr/testify

boekkooi-impossiblecloud · 2025-07-04T09:38:48Z

Summary

The go-yaml project was archived on Apr 1, 2025 and is no longer maintained. Luckily the official YAML organization forked the project and is maintaining it under https://github.com/yaml/go-yaml/tree/v3.

Changes

Replaced all occurrences of gopkg.in/yaml.v3 with go.yaml.in/yaml/v3

Motivation

go-yaml was archived on Apr 1.

Related issues

Migrate to a maintained yaml package #1724

dolmen · 2025-08-01T09:48:13Z

There is work in progress about the license of that project: yaml/go-yaml#6

So we should block until that is stabilized.

harryzcy · 2025-08-30T05:26:53Z

There is work in progress about the license of that project: yaml/go-yaml#6

So we should block until that is stabilized.

License of go-yaml has changed to Apache now. This PR can move forward

ccoVeille · 2025-08-30T09:29:36Z

The change are only on main branch for now.

go-yaml has only released -rc for now for the v4.

It might be a bit early

mrideout · 2025-09-17T00:06:06Z

I'd like to see this PR merged, with the v3 tag it now has, while the YAML organization works on v4. That move would make it easier to get buy-in for using Testify at organizations that balk at running abandonware. The main branch's README received a July 30 update that makes it clear that v3 will receive security updates.

fredbi

The change look good to me

fredbi · 2025-09-20T18:47:01Z

I think this is good to be merged, so instantly all indirect dependencies to the archive repo would disappear.
Notice that the build tags trick that is used in assert/yaml has no influence on how go.mod propagates dependencies.

* fixes go-openapi#127 The direct dependencies to this archived repo have been replaced by the active fork imported from go.yaml.in/yaml/v3. NOTE: an indirect dependency remains from stretchr/testify. There is an open PR there to solve this stretchr/testify#1772. There is not much I can do here to remove this indirect test dependency. Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

* fixes #127 The direct dependencies to this archived repo have been replaced by the active fork imported from go.yaml.in/yaml/v3. NOTE: an indirect dependency remains from stretchr/testify. There is an open PR there to solve this stretchr/testify#1772. There is not much I can do here to remove this indirect test dependency. Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

brackendawson · 2025-09-22T10:09:44Z

The majority of testify users would need to wait until we make a release to benefit from this. Recently we've been on a (very) approximate 6-monthly release cadence, that's not to say we couldn't release earlier than expected to mitigate this and another EOL dependency.

My point is that there isn't a pressing need to rush this. We really do want to merge this, but v4 is in release candidate so I don't think it will be all that long now.

andig · 2026-01-01T12:35:05Z

Happy New Year! Would be nice to see this merged- it's our only remaining dependency on the old library...

This was not completly finished in the last one. It is a problem of testify, but they are working on it (see stretchr/testify#1772). This hopefully fixes that

This was not completely finished in the last one. It is a problem of testify, but they are working on it (see stretchr/testify#1772). This hopefully fixes that --------- Co-authored-by: Nico Haas <nico.haas@aisec.fraunhofer.de>

dolmen · 2026-05-06T08:14:54Z

I have now merged #1823 (upgrade objx to v0.5.3).

@boekkooi-impossiblecloud Please rebase.

The [go-yaml](https://github.com/go-yaml/yaml/) project was archived on Apr 1, 2025 and is no longer maintained. Luckily the official YAML organization forked the project and is maintaining it under https://github.com/yaml/go-yaml/tree/v3.

boekkooi-impossiblecloud · 2026-05-06T18:51:10Z

@dolmen Thanks you, The PR is rebased. Have a great evening.

sylr · 2026-07-06T15:05:28Z

Could we merge this ?

darccio · 2026-07-07T13:35:05Z

In dd-trace-go we got a request to revert the introduction of go.yaml.in/yaml/v3 - which we rejected - and this lead us to investigate what needs to be done to remove gopkg.in/yaml.v3 from our dependency graph.

Our main dependency introducing it is stretchr/testify, and we are glad to see there is an ongoing effort. What needs to be done to get this PR merged? Thanks!

kgaughan · 2026-07-19T15:05:22Z

@dolmen Are there any further changes blocking this from being merged?

matmulle · 2026-07-21T08:18:22Z

@dolmen Anything we can help with? I believe changes are now made but the review is still not dismissed.

Thanks!

thaJeztah · 2026-08-12T18:20:02Z

 require (
 	github.com/stretchr/objx v0.5.3
-	gopkg.in/yaml.v3 v3.0.1
+	go.yaml.in/yaml/v3 v3.0.4


Might be worth updating to v3.0.5, which now has zero dependencies;
yaml/go-yaml@v3.0.4...v3.0.5

thaJeztah · 2026-08-12T18:22:56Z

@dolmen Anything we can help with? I believe changes are now made but the review is still not dismissed.

Thanks!

Also curious; the new location is the same code as the old module; I saw mention of licensing issues, but if I see correctly that was for automated scanners that couldn't parse the license text (but already the case for the old module).

If that's the remaining blocker, I'm also happy to open a backport in upstream to get the license changes in the v2 and v3 branches.

(I'm trying to reduce our dependency tree, and most repositories migrated, but testify still causes the old module name to be included).

brackendawson · 2026-08-13T07:11:28Z

Let's get this moving, with reference to @dolmen's plan I've drafted the v1.12.0 release, it contains only one change that warrants a minor version bump.

I'll give some appropriate amount of time for the other maintainers to give input before I release it, then merge this and release as 1.12.1 (or 1.13.0 if an actual change happens).

I'd prefer not to do so; but I can dismiss @dolmen's review here if we need to. I'm confident that his concerns are resolved.

darccio · 2026-08-13T07:53:21Z

Thanks @brackendawson. @dolmen's plan and your approach both sound good to me.

ccoVeille · 2026-08-14T20:46:14Z

The plan sounds valid.

As I'm maintainer of yaml/go-yaml and testify I stayed silent here as I'm partial.

I'm happy to see the integration of yaml/go-yaml in testify is progressing.

Especially now we (go-yaml) provided a v3.0.5 that is now dependency free

brackendawson · 2026-08-14T21:44:35Z

If we want to upgrade to 3.0.5 in this or another PR I’m quite willing..

harryzcy · 2026-08-16T00:48:43Z

If we want to upgrade to 3.0.5 in this or another PR I’m quite willing..

I opened #1935 to upgrade to 3.0.5. It's one additional commit on top of this branch, to include original @boekkooi-impossiblecloud's attribution.

brackendawson · 2026-08-17T08:01:07Z

I opened #1935 to upgrade to 3.0.5. It's one additional commit on top of this branch, to include original @boekkooi-impossiblecloud's attribution.

Thanks! We need to be aware that doing this effectively bypasses reviews on this PR, though.

I am confident that dolmen's concerns have been fully resolved.

brackendawson · 2026-08-17T08:25:09Z

Thank you @boekkooi-impossiblecloud and @harryzcy, this will be included in a v1.12.1 release soon.

boekkooi-impossiblecloud · 2026-08-17T08:49:38Z

Thanks @brackendawson, @dolmen for the reviewing and maintaining testify!
Also thanks @harryzcy for creating the bump to 3.0.5 while I was on vacation 😄

Have a great day y'all!

darccio · 2026-08-19T20:33:43Z

Thanks @brackendawson @dolmen @boekkooi-impossiblecloud and everybody else involved. Nice step forward!

…2.1) (#93) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `v1.11.1` → `v1.12.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstretchr%2ftestify/v1.12.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstretchr%2ftestify/v1.11.1/v1.12.1?slim=true) | --- ### Release Notes <details> <summary>stretchr/testify (github.com/stretchr/testify)</summary> ### [`v1.12.1`](https://github.com/stretchr/testify/releases/tag/v1.12.1) [Compare Source](stretchr/testify@v1.12.0...v1.12.1) This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own. #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@harryzcy](https://github.com/harryzcy) in [#1935](stretchr/testify#1935) - change yaml library to go.yaml.in/yaml/v3 by [@boekkooi-impossiblecloud](https://github.com/boekkooi-impossiblecloud) in [#1772](stretchr/testify#1772) #### New Contributors - [@harryzcy](https://github.com/harryzcy) made their first contribution in [#1935](stretchr/testify#1935) - [@boekkooi-impossiblecloud](https://github.com/boekkooi-impossiblecloud) made their first contribution in [#1772](stretchr/testify#1772) **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@harryzcy](https://github.com/harryzcy) in [#1935](stretchr/testify#1935) - change yaml library to go.yaml.in/yaml/v3 by [@boekkooi-impossiblecloud](https://github.com/boekkooi-impossiblecloud) in [#1772](stretchr/testify#1772) #### New Contributors - [@harryzcy](https://github.com/harryzcy) made their first contribution in [#1935](stretchr/testify#1935) - [@boekkooi-impossiblecloud](https://github.com/boekkooi-impossiblecloud) made their first contribution in [#1772](stretchr/testify#1772) **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> ### [`v1.12.0`](https://github.com/stretchr/testify/releases/tag/v1.12.0) [Compare Source](stretchr/testify@v1.11.1...v1.12.0) #### What's Changed ##### Functional Changes - assert: make \*AssertionFunc types just aliases by [@dolmen](https://github.com/dolmen) in [#1563](stretchr/testify#1563) ##### Fixes - mock: avoid panic when expected type is nil in Arguments.Diff by [@mutaiib](https://github.com/mutaiib) in [#1775](stretchr/testify#1775) - mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by [@brackendawson](https://github.com/brackendawson) in [#1786](stretchr/testify#1786) - suite: validate method signatures and continue execution for valid tests by [@vyas-git](https://github.com/vyas-git) in [#1665](stretchr/testify#1665) - assert.PanicsWithError: report error message by [@olivergondza](https://github.com/olivergondza) in [#1400](stretchr/testify#1400) - assert: IsIncreasing et al can return false w/out failing by [@brackendawson](https://github.com/brackendawson) in [#1787](stretchr/testify#1787) - add type to error message of assert.Same by [@egawata](https://github.com/egawata) in [#1792](stretchr/testify#1792) - mock.AssertExpectationsForObjects fix panic with wrong testObject type. by [@brackendawson](https://github.com/brackendawson) in [#1795](stretchr/testify#1795) - assert: truncate very long objects in test failure messages by [@brackendawson](https://github.com/brackendawson) in [#1646](stretchr/testify#1646) - assert: fix NotSubset error messages using %#v instead of %q (fixes [#1800](stretchr/testify#1800)) by [@nghiack7](https://github.com/nghiack7) in [#1888](stretchr/testify#1888) - suite: prevent panic when SetupTest skips with HandleStats by [@blackwell-systems](https://github.com/blackwell-systems) in [#1877](stretchr/testify#1877) ##### Documentation, Build & CI - CI: test also with Go 1.23 by [@dolmen](https://github.com/dolmen) in [#1783](stretchr/testify#1783) - Vendor unmaintained github.com/pmezard/go-difflib by [@brackendawson](https://github.com/brackendawson) in [#1708](stretchr/testify#1708) - Promote ccoVeille to maintainer by [@brackendawson](https://github.com/brackendawson) in [#1784](stretchr/testify#1784) - build(deps): bump actions/setup-go from 5 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#1790](stretchr/testify#1790) - assert.YAMLEq: Document mutlidoc behavior by [@brackendawson](https://github.com/brackendawson) in [#1791](stretchr/testify#1791) - \_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by [@dolmen](https://github.com/dolmen) in [#1782](stretchr/testify#1782) - doc: remove ineffective inline code blocks by [@brackendawson](https://github.com/brackendawson) in [#1714](stretchr/testify#1714) - Tag generated assertions as non-generated in new .gitattributes by [@ubunatic](https://github.com/ubunatic) in [#1815](stretchr/testify#1815) - chore: vendor go-spew from <https://github.com/davecgh/go-spew> by [@ccoVeille](https://github.com/ccoVeille) in [#1827](stretchr/testify#1827) - require: fix godoc generation for assertions returning a bool by [@Baxromumarov](https://github.com/Baxromumarov) in [#1850](stretchr/testify#1850) - docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by [@a2not](https://github.com/a2not) in [#1821](stretchr/testify#1821) - docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by [@a2not](https://github.com/a2not) in [#1842](stretchr/testify#1842) - EMERITUS.md: add [@tylerb](https://github.com/tylerb) by [@dolmen](https://github.com/dolmen) in [#1812](stretchr/testify#1812) - CI: test also with Go 1.24 by [@alexandear](https://github.com/alexandear) in [#1856](stretchr/testify#1856) - deps: bump objx to v0.5.3 and remove dependency cycle issue by [@ccoVeille](https://github.com/ccoVeille) in [#1823](stretchr/testify#1823) - CI: upgrade GitHub Actions and pin hashes by [@SuperQ](https://github.com/SuperQ) in [#1883](stretchr/testify#1883) - CI: add \_readme-gofmt tool to reformat Go code in README by [@dolmen](https://github.com/dolmen) in [#1889](stretchr/testify#1889) - CI: add check of GitHub Action pinned hashes against tag by [@dolmen](https://github.com/dolmen) in [#1885](stretchr/testify#1885) - \_codegen: modernize by [@dolmen](https://github.com/dolmen) in [#1890](stretchr/testify#1890) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1906](stretchr/testify#1906) - mock: Mock.Return does not exist anymore by [@Kentzo](https://github.com/Kentzo) in [#1905](stretchr/testify#1905) #### New Contributors - [@mutaiib](https://github.com/mutaiib) made their first contribution in [#1775](stretchr/testify#1775) - [@vyas-git](https://github.com/vyas-git) made their first contribution in [#1665](stretchr/testify#1665) - [@olivergondza](https://github.com/olivergondza) made their first contribution in [#1400](stretchr/testify#1400) - [@egawata](https://github.com/egawata) made their first contribution in [#1792](stretchr/testify#1792) - [@ubunatic](https://github.com/ubunatic) made their first contribution in [#1815](stretchr/testify#1815) - [@Baxromumarov](https://github.com/Baxromumarov) made their first contribution in [#1850](stretchr/testify#1850) - [@a2not](https://github.com/a2not) made their first contribution in [#1821](stretchr/testify#1821) - [@nghiack7](https://github.com/nghiack7) made their first contribution in [#1888](stretchr/testify#1888) - [@blackwell-systems](https://github.com/blackwell-systems) made their first contribution in [#1877](stretchr/testify#1877) - [@Kentzo](https://github.com/Kentzo) made their first contribution in [#1905](stretchr/testify#1905) **Full Changelog**: <stretchr/testify@v1.11.0...v1.12.0> #### What's Changed - mock: avoid panic when expected type is nil in Arguments.Diff by [@mutaiib](https://github.com/mutaiib) in [#1775](stretchr/testify#1775) - CI: test also with Go 1.23 by [@dolmen](https://github.com/dolmen) in [#1783](stretchr/testify#1783) - mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by [@brackendawson](https://github.com/brackendawson) in [#1786](stretchr/testify#1786) - suite: validate method signatures and continue execution for valid tests by [@vyas-git](https://github.com/vyas-git) in [#1665](stretchr/testify#1665) - Vendor unmaintained github.com/pmezard/go-difflib by [@brackendawson](https://github.com/brackendawson) in [#1708](stretchr/testify#1708) - Promote ccoVeille to maintainer by [@brackendawson](https://github.com/brackendawson) in [#1784](stretchr/testify#1784) - build(deps): bump actions/setup-go from 5 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#1790](stretchr/testify#1790) - assert.PanicsWithError: report error message by [@olivergondza](https://github.com/olivergondza) in [#1400](stretchr/testify#1400) - assert: IsIncreasing et al can return false w/out failing by [@brackendawson](https://github.com/brackendawson) in [#1787](stretchr/testify#1787) - add type to error message of assert.Same by [@egawata](https://github.com/egawata) in [#1792](stretchr/testify#1792) - assert.YAMLEq: Document mutlidoc behavior by [@brackendawson](https://github.com/brackendawson) in [#1791](stretchr/testify#1791) - mock.AssertExpectationsForObjects fix panic with wrong testObject type. by [@brackendawson](https://github.com/brackendawson) in [#1795](stretchr/testify#1795) - \_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by [@dolmen](https://github.com/dolmen) in [#1782](stretchr/testify#1782) - assert: truncate very long objects in test failure messages by [@brackendawson](https://github.com/brackendawson) in [#1646](stretchr/testify#1646) - doc: remove ineffective inline code blocks by [@brackendawson](https://github.com/brackendawson) in [#1714](stretchr/testify#1714) - Tag generated assertions as non-generated in new .gitattributes by [@ubunatic](https://github.com/ubunatic) in [#1815](stretchr/testify#1815) - chore: vendor go-spew from <https://github.com/davecgh/go-spew> by [@ccoVeille](https://github.com/ccoVeille) in [#1827](stretchr/testify#1827) - require: fix godoc generation for assertions returning a bool by [@Baxromumarov](https://github.com/Baxromumarov) in [#1850](stretchr/testify#1850) - docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by [@a2not](https://github.com/a2not) in [#1821](stretchr/testify#1821) - docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by [@a2not](https://github.com/a2not) in [#1842](stretchr/testify#1842) - EMERITUS.md: add [@tylerb](https://github.com/tylerb) by [@dolmen](https://github.com/dolmen) in [#1812](stretchr/testify#1812) - CI: test also with Go 1.24 by [@alexandear](https://github.com/alexandear) in [#1856](stretchr/testify#1856) - deps: bump objx to v0.5.3 and remove dependency cycle issue by [@ccoVeille](https://github.com/ccoVeille) in [#1823](stretchr/testify#1823) - CI: upgrade GitHub Actions and pin hashes by [@SuperQ](https://github.com/SuperQ) in [#1883](stretchr/testify#1883) - assert: fix NotSubset error messages using %#v instead of %q (fixes [#1800](stretchr/testify#1800)) by [@nghiack7](https://github.com/nghiack7) in [#1888](stretchr/testify#1888) - suite: prevent panic when SetupTest skips with HandleStats by [@blackwell-systems](https://github.com/blackwell-systems) in [#1877](stretchr/testify#1877) - CI: add \_readme-gofmt tool to reformat Go code in README by [@dolmen](https://github.com/dolmen) in [#1889](stretchr/testify#1889) - CI: add check of GitHub Action pinned hashes against tag by [@dolmen](https://github.com/dolmen) in [#1885](stretchr/testify#1885) - \_codegen: modernize by [@dolmen](https://github.com/dolmen) in [#1890](stretchr/testify#1890) - assert: make \*AssertionFunc types just aliases by [@dolmen](https://github.com/dolmen) in [#1563](stretchr/testify#1563) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1906](stretchr/testify#1906) - mock: Mock.Return does not exist anymore by [@Kentzo](https://github.com/Kentzo) in [#1905](stretchr/testify#1905) #### New Contributors - [@mutaiib](https://github.com/mutaiib) made their first contribution in [#1775](stretchr/testify#1775) - [@vyas-git](https://github.com/vyas-git) made their first contribution in [#1665](stretchr/testify#1665) - [@olivergondza](https://github.com/olivergondza) made their first contribution in [#1400](stretchr/testify#1400) - [@egawata](https://github.com/egawata) made their first contribution in [#1792](stretchr/testify#1792) - [@ubunatic](https://github.com/ubunatic) made their first contribution in [#1815](stretchr/testify#1815) - [@Baxromumarov](https://github.com/Baxromumarov) made their first contribution in [#1850](stretchr/testify#1850) - [@a2not](https://github.com/a2not) made their first contribution in [#1821](stretchr/testify#1821) - [@nghiack7](https://github.com/nghiack7) made their first contribution in [#1888](stretchr/testify#1888) - [@blackwell-systems](https://github.com/blackwell-systems) made their first contribution in [#1877](stretchr/testify#1877) - [@Kentzo](https://github.com/Kentzo) made their first contribution in [#1905](stretchr/testify#1905) **Full Changelog**: <stretchr/testify@v1.11.0...v1.12.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Paris) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/runner-k8s-plugin/pulls/93

…p ci] Bumps the go-modules group in /e2e-go with 2 updates: [github.com/stretchr/testify](https://github.com/stretchr/testify) and [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus). Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 Release notes *Sourced from [github.com/stretchr/testify's releases](https://github.com/stretchr/testify/releases).* > v1.12.1 > ------- > > This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own. > > What's Changed > -------------- > > * Change yaml library to `go.yaml.in/yaml/v3` by [`@harryzcy`](https://github.com/harryzcy) in [stretchr/testify#1935](https://redirect.github.com/stretchr/testify/pull/1935) > * change yaml library to go.yaml.in/yaml/v3 by [`@boekkooi-impossiblecloud`](https://github.com/boekkooi-impossiblecloud) in [stretchr/testify#1772](https://redirect.github.com/stretchr/testify/pull/1772) > > New Contributors > ---------------- > > * [`@harryzcy`](https://github.com/harryzcy) made their first contribution in [stretchr/testify#1935](https://redirect.github.com/stretchr/testify/pull/1935) > * [`@boekkooi-impossiblecloud`](https://github.com/boekkooi-impossiblecloud) made their first contribution in [stretchr/testify#1772](https://redirect.github.com/stretchr/testify/pull/1772) > > **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> > > What's Changed > -------------- > > * Change yaml library to `go.yaml.in/yaml/v3` by [`@harryzcy`](https://github.com/harryzcy) in [stretchr/testify#1935](https://redirect.github.com/stretchr/testify/pull/1935) > * change yaml library to go.yaml.in/yaml/v3 by [`@boekkooi-impossiblecloud`](https://github.com/boekkooi-impossiblecloud) in [stretchr/testify#1772](https://redirect.github.com/stretchr/testify/pull/1772) > > New Contributors > ---------------- > > * [`@harryzcy`](https://github.com/harryzcy) made their first contribution in [stretchr/testify#1935](https://redirect.github.com/stretchr/testify/pull/1935) > * [`@boekkooi-impossiblecloud`](https://github.com/boekkooi-impossiblecloud) made their first contribution in [stretchr/testify#1772](https://redirect.github.com/stretchr/testify/pull/1772) > > **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> > > v1.12.0 > ------- > > What's Changed > -------------- > > ### Functional Changes > > * assert: make \*AssertionFunc types just aliases by [`@dolmen`](https://github.com/dolmen) in [stretchr/testify#1563](https://redirect.github.com/stretchr/testify/pull/1563) > > ### Fixes > > * mock: avoid panic when expected type is nil in Arguments.Diff by [`@mutaiib`](https://github.com/mutaiib) in [stretchr/testify#1775](https://redirect.github.com/stretchr/testify/pull/1775) > * mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1786](https://redirect.github.com/stretchr/testify/pull/1786) > * suite: validate method signatures and continue execution for valid tests by [`@vyas-git`](https://github.com/vyas-git) in [stretchr/testify#1665](https://redirect.github.com/stretchr/testify/pull/1665) > * assert.PanicsWithError: report error message by [`@olivergondza`](https://github.com/olivergondza) in [stretchr/testify#1400](https://redirect.github.com/stretchr/testify/pull/1400) > * assert: IsIncreasing et al can return false w/out failing by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1787](https://redirect.github.com/stretchr/testify/pull/1787) > * add type to error message of assert.Same by [`@egawata`](https://github.com/egawata) in [stretchr/testify#1792](https://redirect.github.com/stretchr/testify/pull/1792) > * mock.AssertExpectationsForObjects fix panic with wrong testObject type. by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1795](https://redirect.github.com/stretchr/testify/pull/1795) > * assert: truncate very long objects in test failure messages by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1646](https://redirect.github.com/stretchr/testify/pull/1646) > * assert: fix NotSubset error messages using %#v instead of %q (fixes [#1800](https://redirect.github.com/stretchr/testify/issues/1800)) by [`@nghiack7`](https://github.com/nghiack7) in [stretchr/testify#1888](https://redirect.github.com/stretchr/testify/pull/1888) > * suite: prevent panic when SetupTest skips with HandleStats by [`@blackwell-systems`](https://github.com/blackwell-systems) in [stretchr/testify#1877](https://redirect.github.com/stretchr/testify/pull/1877) > > ### Documentation, Build & CI > > * CI: test also with Go 1.23 by [`@dolmen`](https://github.com/dolmen) in [stretchr/testify#1783](https://redirect.github.com/stretchr/testify/pull/1783) > * Vendor unmaintained github.com/pmezard/go-difflib by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1708](https://redirect.github.com/stretchr/testify/pull/1708) > * Promote ccoVeille to maintainer by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1784](https://redirect.github.com/stretchr/testify/pull/1784) > * build(deps): bump actions/setup-go from 5 to 6 by [`@dependabot`](https://github.com/dependabot)[bot] in [stretchr/testify#1790](https://redirect.github.com/stretchr/testify/pull/1790) > * assert.YAMLEq: Document mutlidoc behavior by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1791](https://redirect.github.com/stretchr/testify/pull/1791) > * \_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by [`@dolmen`](https://github.com/dolmen) in [stretchr/testify#1782](https://redirect.github.com/stretchr/testify/pull/1782) > * doc: remove ineffective inline code blocks by [`@brackendawson`](https://github.com/brackendawson) in [stretchr/testify#1714](https://redirect.github.com/stretchr/testify/pull/1714) > * Tag generated assertions as non-generated in new .gitattributes by [`@ubunatic`](https://github.com/ubunatic) in [stretchr/testify#1815](https://redirect.github.com/stretchr/testify/pull/1815) ... (truncated) Commits * [`959dbda`](stretchr/testify@959dbda) Merge pull request [#1935](https://redirect.github.com/stretchr/testify/issues/1935) from harryzcy/yaml-update * [`9bb7176`](stretchr/testify@9bb7176) Update go.yaml.in/yaml/v3 to v3.0.5 * [`001eb79`](stretchr/testify@001eb79) Merge pull request [#1905](https://redirect.github.com/stretchr/testify/issues/1905) from Kentzo/patch-1 * [`ad40f38`](stretchr/testify@ad40f38) Merge pull request [#1906](https://redirect.github.com/stretchr/testify/issues/1906) from stretchr/dependabot/github\_actions/actions/chec... * [`3bae017`](stretchr/testify@3bae017) build(deps): bump actions/checkout from 6.0.2 to 6.0.3 * [`f8c01f3`](stretchr/testify@f8c01f3) mock: Mock.Return does not exist anymore * [`12f8b56`](stretchr/testify@12f8b56) Merge pull request [#1563](https://redirect.github.com/stretchr/testify/issues/1563) from stretchr/make-AssertionFunc-types-aliases * [`a11649e`](stretchr/testify@a11649e) assert: make \*AssertionFunc type just aliases * [`dc20f41`](stretchr/testify@dc20f41) Merge pull request [#1890](https://redirect.github.com/stretchr/testify/issues/1890) from stretchr/dolmen/codegen-modernize * [`098f8d7`](stretchr/testify@098f8d7) \_codegen: use strings.Builder * Additional commits viewable in [compare view](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.1 Release notes *Sourced from [github.com/sirupsen/logrus's releases](https://github.com/sirupsen/logrus/releases).* > v1.10.1 > ------- > > Logrus v1.10.1 > ============== > > This patch release fixes two issues in field formatting and handling: > > * Fix a regression introduced in v1.10.0 where `TextFormatter` could panic > when formatting nil or panicking `error` and `fmt.Stringer` values. > * Allow function-backed values implementing `error` to be used with > `WithError`, `WithField`, and `WithFields`. > > Dependency Changes > > * update github.com/stretchr/testify to v1.12.0 > > **Full Changelog**: <sirupsen/logrus@v1.10.0...v1.10.1> > > v1.10.0 > ------- > > Logrus v1.10.0 > ============== > > This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs. > > 🚀 Performance > ------------- > > Major improvements across `TextFormatter`, entry handling, and common logger paths: > > * ~17% lower geomean runtime across the benchmark suite > * ~27% higher geomean formatter throughput > * Common enabled logging paths are ~30–44% faster > * `WithError` is ~40% faster > * Chained fields are ~46% faster > * `TextFormatter` paths are up to ~40% faster > * Allocation counts are reduced by ~25–74% across measured `TextFormatter` cases, with the largest reductions in colored output > > The improvements also show up in complete logger paths: > > * Logger + `TextFormatter` is ~31% faster, with ~24% fewer allocations > * Logger + `JSONFormatter` is ~21% faster, with ~10% fewer allocations > > `JSONFormatter` itself remains largely unchanged in runtime performance, with small allocation reductions. > > 🔄 `log/slog` interoperability > ----------------------------- > > v1.10 adds bidirectional interoperability between Logrus and Go's `log/slog`: > > * A Logrus `slog` hook can forward existing Logrus entries to an `slog` logger. > * `hooks/slog.NewHandler` implements `slog.Handler`, allowing `log/slog` records to use an existing Logrus logger and its hooks, formatter, and output. > * The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information. > * Caller reporting is configured per handler, without requiring Logrus's logger-wide `ReportCaller` option. > * Custom `slog` levels can be mapped to Logrus levels. ... (truncated) Changelog *Sourced from [github.com/sirupsen/logrus's changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md).* > 1.10.1 > ------ > > Fixes: > > * Fix a regression introduced in v1.10.0 where `TextFormatter` could panic > when formatting nil or panicking `error` and `fmt.Stringer` values. > * Allow function-backed implementations of `error` as field values. > > 1.10.0 > ------ > > Fixes: > > * Fix reentrant logging deadlocks in formatter paths. > * Fix race conditions in formatter and entry handling. > * Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly > panicking when called with `PanicLevel`. Use the corresponding `Panic` > methods when panic behavior is desired. > * Improve concurrency safety around formatter and hook access. > > Features: > > * Add `slog` hook for forwarding Logrus entries to `log/slog`. > * Add `slog.Handler` for forwarding `log/slog` records to a Logrus logger, > including levels, fields, groups, context, time, and optional caller > reporting. The hook and handler can also be combined to help migrate > between Logrus and `log/slog`. > * Add minimal, composable logging interfaces for each log level. This enables > consumers to depend on narrower interfaces, making it easier to substitute > or adapt logging implementations. > * Allow `Entry.Caller` to be set explicitly and preserve it across derived > entries, enabling custom caller detection without Logrus overwriting > caller information when `ReportCaller` is enabled. > > Changed: > > * Raise minimum supported Go version to 1.23. > * TextFormatter now renders `[]byte` values as raw/quoted strings instead of slice-of-ints. > * TextFormatter now uses distinct dimmed colors for debug and trace output. > * TextFormatter now automatically enables colors on Windows terminals with ANSI support, > matching the behavior on other platforms. > * `Entry.HasCaller` is now deprecated in favor of checking `Entry.Caller` directly. > * Deprecated `MutexWrap`, which was unintentionally exposed as public API. > It remains available as an alias for compatibility but should not be used > directly. > > Performance: > > * Significantly improve TextFormatter performance and reduce allocations. > * Optimize common Entry and Logger hot paths. > * Reduce allocations in caller reporting. ... (truncated) Commits * [`8b673a9`](sirupsen/logrus@8b673a9) Merge pull request [#1583](https://redirect.github.com/sirupsen/logrus/issues/1583) from thaJeztah/release\_1.10.1 * [`0b920ad`](sirupsen/logrus@0b920ad) Merge pull request [#1584](https://redirect.github.com/sirupsen/logrus/issues/1584) from thaJeztah/more\_coverage * [`5e20694`](sirupsen/logrus@5e20694) TextFormatter: cover nil pointer method receivers * [`8312732`](sirupsen/logrus@8312732) update changelog for v1.10.1 * [`e987a40`](sirupsen/logrus@e987a40) Merge pull request [#1582](https://redirect.github.com/sirupsen/logrus/issues/1582) from thaJeztah/panic\_handler * [`17d574b`](sirupsen/logrus@17d574b) TextFormatter: recover panics from Error and String methods * [`134c80f`](sirupsen/logrus@134c80f) Merge pull request [#1579](https://redirect.github.com/sirupsen/logrus/issues/1579) from thaJeztah/err\_handling * [`7350f42`](sirupsen/logrus@7350f42) logger: WithError: wrap logger.WithError for consistency * [`b3369d2`](sirupsen/logrus@b3369d2) entry: allow function-backed error fields * [`1080083`](sirupsen/logrus@1080083) Merge pull request [#1578](https://redirect.github.com/sirupsen/logrus/issues/1578) from thaJeztah/err\_handling\_tests * Additional commits viewable in [compare view](sirupsen/logrus@v1.9.4...v1.10.1) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

dolmen added YAML About YAML and dependency pkg-assert Change related to package testify/assert pkg-require Change related to package testify/require dependencies Pull requests that update a dependency file labels Sep 2, 2025

fredbi approved these changes Sep 20, 2025

View reviewed changes

fredbi mentioned this pull request Sep 20, 2025

chore(deps): removed direct dependencies to gopkg.in/yaml.v3 go-openapi/swag#139

Merged

5 tasks

pjbgf mentioned this pull request Sep 23, 2025

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v4 go-git/go-git#1665

Open

tuunit mentioned this pull request Nov 28, 2025

chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.yaml.in/yaml/v3 uber-go/zap#1522

Merged

ccoVeille mentioned this pull request Dec 2, 2025

chore: migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 #1835

Closed

ash2k mentioned this pull request Dec 4, 2025

chore: switch YAML library testcontainers/testcontainers-go#3507

Merged

thaJeztah mentioned this pull request Dec 9, 2025

switch to maintained go.yaml.in/yaml/v3 dependency DefangLabs/secret-detector#4

Open

scop mentioned this pull request Dec 30, 2025

Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 bufbuild/protoyaml-go#70

Merged

SaschaSchwarze0 mentioned this pull request Jan 2, 2026

Update package usage to reduce gopkg.in/yaml usage IBM-Cloud/ibm-cloud-cli-sdk#485

Merged

SuperQ mentioned this pull request Jan 12, 2026

Migrate yaml library #1844

Closed

SuperQ approved these changes Jan 12, 2026

View reviewed changes

aknuds1 approved these changes Feb 3, 2026

View reviewed changes

oxisto added a commit to confirmate/confirmate that referenced this pull request Feb 7, 2026

*: update to go.yaml.in/yaml/v3

8e4512c

This was not completly finished in the last one. It is a problem of testify, but they are working on it (see stretchr/testify#1772). This hopefully fixes that

oxisto mentioned this pull request Feb 7, 2026

*: update to go.yaml.in/yaml/v3 confirmate/confirmate#129

Merged

oneumyvakin mentioned this pull request Feb 12, 2026

Fix CVE-2022-28948 - Remove gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c #1532

Closed

sylr approved these changes Feb 17, 2026

View reviewed changes

change yaml library to go.yaml.in/yaml/v3

0358d0e

The [go-yaml](https://github.com/go-yaml/yaml/) project was archived on Apr 1, 2025 and is no longer maintained. Luckily the official YAML organization forked the project and is maintaining it under https://github.com/yaml/go-yaml/tree/v3.

boekkooi-impossiblecloud force-pushed the yaml-update branch from 739dbe6 to 0358d0e Compare May 6, 2026 18:50

dolmen mentioned this pull request May 7, 2026

Migrate to a maintained yaml package #1724

Closed

kgaughan mentioned this pull request Jul 19, 2026

Switch to a maintained YAML library goss-org/goss#1084

Open

3 tasks

thaJeztah reviewed Aug 12, 2026

View reviewed changes

brackendawson approved these changes Aug 13, 2026

View reviewed changes

brackendawson mentioned this pull request Aug 17, 2026

Change yaml library to go.yaml.in/yaml/v3 #1935

Merged

brackendawson merged commit 0358d0e into stretchr:master Aug 17, 2026
10 checks passed

Uh oh!

Conversation

boekkooi-impossiblecloud commented Jul 4, 2025

Summary

Changes

Motivation

Related issues

Uh oh!

dolmen commented Aug 1, 2025

Uh oh!

harryzcy commented Aug 30, 2025

Uh oh!

ccoVeille commented Aug 30, 2025

Uh oh!

mrideout commented Sep 17, 2025

Uh oh!

fredbi left a comment

Choose a reason for hiding this comment

Uh oh!

fredbi commented Sep 20, 2025

Uh oh!

brackendawson commented Sep 22, 2025

Uh oh!

andig commented Jan 1, 2026

Uh oh!

dolmen commented May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

boekkooi-impossiblecloud commented May 6, 2026

Uh oh!

sylr commented Jul 6, 2026

Uh oh!

darccio commented Jul 7, 2026

Uh oh!

kgaughan commented Jul 19, 2026

Uh oh!

matmulle commented Jul 21, 2026

Uh oh!

thaJeztah Aug 12, 2026

Choose a reason for hiding this comment

Uh oh!

thaJeztah commented Aug 12, 2026

Uh oh!

brackendawson commented Aug 13, 2026

Uh oh!

darccio commented Aug 13, 2026

Uh oh!

ccoVeille commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

brackendawson commented Aug 14, 2026

Uh oh!

harryzcy commented Aug 16, 2026

Uh oh!

brackendawson commented Aug 17, 2026

Uh oh!

Uh oh!

brackendawson commented Aug 17, 2026

Uh oh!

boekkooi-impossiblecloud commented Aug 17, 2026

Uh oh!

darccio commented Aug 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

16 participants

dolmen commented May 6, 2026 •

edited

Loading

ccoVeille commented Aug 14, 2026 •

edited

Loading