Bump the go-modules group with 3 updates

[dependabot]

Bumps the go-modules group with 3 updates: github.com/onsi/gomega, github.com/bodgit/sevenzip and go4.org.

Updates github.com/onsi/gomega from 1.39.1 to 1.40.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Commits

• 87ee9d3 v1.40.0
• ea66027 v1.40.0 (full)
• e3fd789 update docs to reflect new versioning strategy
• 7d4ee30 first push to master-lite
• e4a82d1 Bump github/codeql-action from 3 to 4 (#875)
• af62723 Bump rexml from 3.4.0 to 3.4.2 in /docs (#870)
• e164221 Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (#895)
• 334a282 Bump faraday from 2.12.2 to 2.14.1 in /docs (#896)
• See full diff in compare view

Updates github.com/bodgit/sevenzip from 1.6.1 to 1.6.2

Release notes

Sourced from github.com/bodgit/sevenzip's releases.

v1.6.2

1.6.2 (2026-04-28)

Bug Fixes

• Add ARM64 filter support (#395) (8648ac7)
• deps: update go4.org digest to a507140 (#422) (367448a)
• deps: update module github.com/andybalholm/brotli to v1.2.1 (#425) (63d4609)
• deps: update module github.com/klauspost/compress to v1.18.5 (#426) (c01c118)
• deps: update module github.com/pierrec/lz4/v4 to v4.1.26 (#427) (189b20d)
• deps: update module github.com/spf13/afero to v1.15.0 (#431) (960c916)
• deps: update module golang.org/x/sync to v0.20.0 (#432) (aa1e391)
• deps: update module golang.org/x/text to v0.36.0 (#433) (dbed104)
• Handle streams with no files (#401) (fe03793)
• Prevent panics discovered by fuzzing (#402) (740fcf9)

Changelog

Sourced from github.com/bodgit/sevenzip's changelog.

1.6.2 (2026-04-28)

Bug Fixes

• Add ARM64 filter support (#395) (8648ac7)
• deps: update go4.org digest to a507140 (#422) (367448a)
• deps: update module github.com/andybalholm/brotli to v1.2.1 (#425) (63d4609)
• deps: update module github.com/klauspost/compress to v1.18.5 (#426) (c01c118)
• deps: update module github.com/pierrec/lz4/v4 to v4.1.26 (#427) (189b20d)
• deps: update module github.com/spf13/afero to v1.15.0 (#431) (960c916)
• deps: update module golang.org/x/sync to v0.20.0 (#432) (aa1e391)
• deps: update module golang.org/x/text to v0.36.0 (#433) (dbed104)
• Handle streams with no files (#401) (fe03793)
• Prevent panics discovered by fuzzing (#402) (740fcf9)

Commits

• d6c1f14 chore(main): release 1.6.2 (#420)
• 740fcf9 fix: Prevent panics discovered by fuzzing (#402)
• 10f0674 chore(deps): update github/codeql-action action to v4.35.2 (#439)
• 7abcd56 chore(deps): update marocchino/sticky-pull-request-comment action to v3 (#436)
• 00b55e9 chore(deps): update actions/upload-artifact action to v7 (#435)
• 60169dd chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6 (#438)
• 2625d26 chore(deps): update actions/checkout action to v6 (#434)
• 8344328 chore(deps): update pre-commit hook commitizen-tools/commitizen to v4 (#437)
• 849dc25 chore(deps): update pre-commit hook golangci/golangci-lint to v2.11.4 (#429)
• 37a8e9d chore(deps): update pre-commit hook gitleaks/gitleaks to v8.30.1 (#428)
• Additional commits viewable in compare view

Updates go4.org from 0.0.0-20230225012048-214862532bf5 to 0.0.0-20260112195520-a5071408f32f

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions