Bump github.com/sirupsen/logrus from 1.4.2 to 1.8.3 #8

Open

dependabot[bot] wants to merge 1 commit from dependabot/go_modules/github.com/sirupsen/logrus-1.8.3 into master

dependabot[bot] commented

2026-05-06 04:02:34 +00:00

(Migrated from github.com)

Bumps github.com/sirupsen/logrus from 1.4.2 to 1.8.3.

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.8.3

What's Changed

Add instructions to use different log levels for local and syslog by @tommyblue in sirupsen/logrus#1372

This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @ozfive in sirupsen/logrus#1376

Use text when shows the logrus output by @xieyuschen in sirupsen/logrus#1339

New Contributors

@tommyblue made their first contribution in sirupsen/logrus#1372

@ozfive made their first contribution in sirupsen/logrus#1376

@xieyuschen made their first contribution in sirupsen/logrus#1339

Full Changelog: https://github.com/sirupsen/logrus/compare/v1.8.2...v1.8.3

v1.8.2

What's Changed

CI: use GitHub Actions by @thaJeztah in sirupsen/logrus#1239

go.mod: github.com/stretchr/testify v1.7.0 by @thaJeztah in sirupsen/logrus#1246

Change godoc badge to pkg.go.dev badge by @minizilla in sirupsen/logrus#1249

Add support for the logger private buffer pool. by @edoger in sirupsen/logrus#1253

bump golang.org/x/sys depency version by @dgsb in sirupsen/logrus#1280

Update README.md by @runphp in sirupsen/logrus#1266

indicates issues as stale automatically by @dgsb in sirupsen/logrus#1281

ci: add go 1.17 to test matrix by @anajavi in sirupsen/logrus#1277

reduce the list of cross build target by @dgsb in sirupsen/logrus#1282

Improve Log methods documentation by @dgsb in sirupsen/logrus#1283

fix race condition for SetFormatter and SetReportCaller by @rubensayshi in sirupsen/logrus#1263

bump version of golang.org/x/sys dependency by @nathanejohnson in sirupsen/logrus#1333

update gopkg.in/yaml.v3 to v3.0.1 by @izhakmo in sirupsen/logrus#1337

update dependencies by @dgsb in sirupsen/logrus#1343

Fix data race in hooks.test package by @FrancoisWagner in sirupsen/logrus#1362

New Contributors

@minizilla made their first contribution in sirupsen/logrus#1249

@edoger made their first contribution in sirupsen/logrus#1253

@runphp made their first contribution in sirupsen/logrus#1266

@anajavi made their first contribution in sirupsen/logrus#1277

@rubensayshi made their first contribution in sirupsen/logrus#1263

@nathanejohnson made their first contribution in sirupsen/logrus#1333

@izhakmo made their first contribution in sirupsen/logrus#1337

@FrancoisWagner made their first contribution in sirupsen/logrus#1362

Full Changelog: https://github.com/sirupsen/logrus/compare/v1.8.1...v1.8.2

v1.8.1

No release notes provided.

v1.8.0

Correct versioning number replacing v1.7.1

v1.7.1

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.8.3

Fixes:

Fix potential denial of service in logrus.Writer() when logging >64KB single-line payloads without newlines (#1376)

1.8.2

Features:

Add support for the logger private buffer pool (#1253)

Fixes:

Fix race condition for SetFormatter and SetReportCaller

Fix data race in hooks test package

1.8.1

Code quality:

move magefile in its own subdir/submodule to remove magefile dependency on logrus consumer

improve timestamp format documentation

Fixes:

fix race condition on logger hooks

1.8.0

Correct versioning number replacing v1.7.1.

1.7.1

Beware this release has introduced a new public API and its semver is therefore incorrect.

Code quality:

use go 1.15 in travis

use magefile as task runner

Fixes:

small fixes about new go 1.13 error formatting system

Fix for long time race condiction with mutating data hooks

Features:

build support for zos

1.7.0

Fixes:

the dependency toward a windows terminal library has been removed

Features:

a new buffer pool management API has been added

a set of <LogLevel>Fn() functions have been added

... (truncated)

Commits

b30aa27 Merge pull request #1339 from xieyuschen/patch-1
6acd903 Merge pull request #1376 from ozfive/master
105e63f Merge pull request #1 from ashmckenzie/ashmckenzie/fix-writer-scanner
c052ba6 Scan text in 64KB chunks
e59b167 Merge pull request #1372 from tommyblue/syslog_different_loglevels
766cfec This commit fixes a potential denial of service vulnerability in logrus.Write...
70234da Add instructions to use different log levels for local and syslog
a448f82 Merge pull request #1362 from FrancoisWagner/fix-data-race-in-hooks-test-pkg
ff07b25 Fix data race in hooks.test package
f8bf765 Merge pull request #1343 from sirupsen/dbd-upd-dep
Additional commits viewable in compare view

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.4.2 to 1.8.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sirupsen/logrus/releases">github.com/sirupsen/logrus's releases</a>.</em></p> <blockquote> <h2>v1.8.3</h2> <h2>What's Changed</h2> <ul> <li>Add instructions to use different log levels for local and syslog by <a href="https://github.com/tommyblue"><code>@tommyblue</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1372">sirupsen/logrus#1372</a></li> <li>This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by <a href="https://github.com/ozfive"><code>@ozfive</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1376">sirupsen/logrus#1376</a></li> <li>Use text when shows the logrus output by <a href="https://github.com/xieyuschen"><code>@xieyuschen</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1339">sirupsen/logrus#1339</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tommyblue"><code>@tommyblue</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1372">sirupsen/logrus#1372</a></li> <li><a href="https://github.com/ozfive"><code>@ozfive</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1376">sirupsen/logrus#1376</a></li> <li><a href="https://github.com/xieyuschen"><code>@xieyuschen</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1339">sirupsen/logrus#1339</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sirupsen/logrus/compare/v1.8.2...v1.8.3">https://github.com/sirupsen/logrus/compare/v1.8.2...v1.8.3</a></p> <h2>v1.8.2</h2> <h2>What's Changed</h2> <ul> <li>CI: use GitHub Actions by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1239">sirupsen/logrus#1239</a></li> <li>go.mod: github.com/stretchr/testify v1.7.0 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1246">sirupsen/logrus#1246</a></li> <li>Change godoc badge to pkg.go.dev badge by <a href="https://github.com/minizilla"><code>@minizilla</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1249">sirupsen/logrus#1249</a></li> <li>Add support for the logger private buffer pool. by <a href="https://github.com/edoger"><code>@edoger</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1253">sirupsen/logrus#1253</a></li> <li>bump golang.org/x/sys depency version by <a href="https://github.com/dgsb"><code>@dgsb</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1280">sirupsen/logrus#1280</a></li> <li>Update README.md by <a href="https://github.com/runphp"><code>@runphp</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1266">sirupsen/logrus#1266</a></li> <li>indicates issues as stale automatically by <a href="https://github.com/dgsb"><code>@dgsb</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1281">sirupsen/logrus#1281</a></li> <li>ci: add go 1.17 to test matrix by <a href="https://github.com/anajavi"><code>@anajavi</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1277">sirupsen/logrus#1277</a></li> <li>reduce the list of cross build target by <a href="https://github.com/dgsb"><code>@dgsb</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1282">sirupsen/logrus#1282</a></li> <li>Improve Log methods documentation by <a href="https://github.com/dgsb"><code>@dgsb</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1283">sirupsen/logrus#1283</a></li> <li>fix race condition for SetFormatter and SetReportCaller by <a href="https://github.com/rubensayshi"><code>@rubensayshi</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1263">sirupsen/logrus#1263</a></li> <li>bump version of golang.org/x/sys dependency by <a href="https://github.com/nathanejohnson"><code>@nathanejohnson</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1333">sirupsen/logrus#1333</a></li> <li>update gopkg.in/yaml.v3 to v3.0.1 by <a href="https://github.com/izhakmo"><code>@izhakmo</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1337">sirupsen/logrus#1337</a></li> <li>update dependencies by <a href="https://github.com/dgsb"><code>@dgsb</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1343">sirupsen/logrus#1343</a></li> <li>Fix data race in hooks.test package by <a href="https://github.com/FrancoisWagner"><code>@FrancoisWagner</code></a> in <a href="https://redirect.github.com/sirupsen/logrus/pull/1362">sirupsen/logrus#1362</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/minizilla"><code>@minizilla</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1249">sirupsen/logrus#1249</a></li> <li><a href="https://github.com/edoger"><code>@edoger</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1253">sirupsen/logrus#1253</a></li> <li><a href="https://github.com/runphp"><code>@runphp</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1266">sirupsen/logrus#1266</a></li> <li><a href="https://github.com/anajavi"><code>@anajavi</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1277">sirupsen/logrus#1277</a></li> <li><a href="https://github.com/rubensayshi"><code>@rubensayshi</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1263">sirupsen/logrus#1263</a></li> <li><a href="https://github.com/nathanejohnson"><code>@nathanejohnson</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1333">sirupsen/logrus#1333</a></li> <li><a href="https://github.com/izhakmo"><code>@izhakmo</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1337">sirupsen/logrus#1337</a></li> <li><a href="https://github.com/FrancoisWagner"><code>@FrancoisWagner</code></a> made their first contribution in <a href="https://redirect.github.com/sirupsen/logrus/pull/1362">sirupsen/logrus#1362</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sirupsen/logrus/compare/v1.8.1...v1.8.2">https://github.com/sirupsen/logrus/compare/v1.8.1...v1.8.2</a></p> <h2>v1.8.1</h2> <p>No release notes provided.</p> <h2>v1.8.0</h2> <p>Correct versioning number replacing v1.7.1</p> <h2>v1.7.1</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md">github.com/sirupsen/logrus's changelog</a>.</em></p> <blockquote> <h1>1.8.3</h1> <p>Fixes:</p> <ul> <li>Fix potential denial of service in logrus.Writer() when logging >64KB single-line payloads without newlines (<a href="https://redirect.github.com/sirupsen/logrus/issues/1376">#1376</a>)</li> </ul> <h1>1.8.2</h1> <p>Features:</p> <ul> <li>Add support for the logger private buffer pool (<a href="https://redirect.github.com/sirupsen/logrus/issues/1253">#1253</a>)</li> </ul> <p>Fixes:</p> <ul> <li>Fix race condition for SetFormatter and SetReportCaller</li> <li>Fix data race in hooks test package</li> </ul> <h1>1.8.1</h1> <p>Code quality:</p> <ul> <li>move magefile in its own subdir/submodule to remove magefile dependency on logrus consumer</li> <li>improve timestamp format documentation</li> </ul> <p>Fixes:</p> <ul> <li>fix race condition on logger hooks</li> </ul> <h1>1.8.0</h1> <p>Correct versioning number replacing v1.7.1.</p> <h1>1.7.1</h1> <p>Beware this release has introduced a new public API and its semver is therefore incorrect.</p> <p>Code quality:</p> <ul> <li>use go 1.15 in travis</li> <li>use magefile as task runner</li> </ul> <p>Fixes:</p> <ul> <li>small fixes about new go 1.13 error formatting system</li> <li>Fix for long time race condiction with mutating data hooks</li> </ul> <p>Features:</p> <ul> <li>build support for zos</li> </ul> <h1>1.7.0</h1> <p>Fixes:</p> <ul> <li>the dependency toward a windows terminal library has been removed</li> </ul> <p>Features:</p> <ul> <li>a new buffer pool management API has been added</li> <li>a set of <code><LogLevel>Fn()</code> functions have been added</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sirupsen/logrus/commit/b30aa27cf4df89e9b96c68c063486c3162f71aef"><code>b30aa27</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1339">#1339</a> from xieyuschen/patch-1</li> <li><a href="https://github.com/sirupsen/logrus/commit/6acd903758687c4a3db3c11701e6c414fcf1c1f7"><code>6acd903</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1376">#1376</a> from ozfive/master</li> <li><a href="https://github.com/sirupsen/logrus/commit/105e63f86c7de9d7aab379fdd6721a3476009eaf"><code>105e63f</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1">#1</a> from ashmckenzie/ashmckenzie/fix-writer-scanner</li> <li><a href="https://github.com/sirupsen/logrus/commit/c052ba6a076b368de89029949f68b3b8ccd8e058"><code>c052ba6</code></a> Scan text in 64KB chunks</li> <li><a href="https://github.com/sirupsen/logrus/commit/e59b167d75f32c4d0db65a2dc6d5f0c4dd548653"><code>e59b167</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1372">#1372</a> from tommyblue/syslog_different_loglevels</li> <li><a href="https://github.com/sirupsen/logrus/commit/766cfece3701d0b1737681ffb5e6e40b628b664d"><code>766cfec</code></a> This commit fixes a potential denial of service vulnerability in logrus.Write...</li> <li><a href="https://github.com/sirupsen/logrus/commit/70234da9c319016474284324265b694b2471c903"><code>70234da</code></a> Add instructions to use different log levels for local and syslog</li> <li><a href="https://github.com/sirupsen/logrus/commit/a448f8228b920021d792e0767626068db5f0e38d"><code>a448f82</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1362">#1362</a> from FrancoisWagner/fix-data-race-in-hooks-test-pkg</li> <li><a href="https://github.com/sirupsen/logrus/commit/ff07b25fdf830fffcf67b64674799b11941542ac"><code>ff07b25</code></a> Fix data race in hooks.test package</li> <li><a href="https://github.com/sirupsen/logrus/commit/f8bf7650dccb756cea26edaf9217aab85500fe07"><code>f8bf765</code></a> Merge pull request <a href="https://redirect.github.com/sirupsen/logrus/issues/1343">#1343</a> from sirupsen/dbd-upd-dep</li> <li>Additional commits viewable in <a href="https://github.com/sirupsen/logrus/compare/v1.4.2...v1.8.3">compare view</a></li> </ul> </details> <br />

twodarek commented

2026-05-06 11:49:51 +00:00

(Migrated from github.com)

@dependabot recreate pr

👍 1

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/go_modules/github.com/sirupsen/logrus-1.8.3:dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git switch dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git switch dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git rebase master

git switch master

git merge --ff-only dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git switch dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git rebase master

git switch master

git merge --no-ff dependabot/go_modules/github.com/sirupsen/logrus-1.8.3

git switch master

git merge --squash dependabot/go_modules/github.com/sirupsen/logrus-1.8.3