Skip to content

chore(deps): bump github.com/xuri/excelize/v2 to 20261003002531 - #731

Merged
adgubrud merged 1 commit into
intel:mainfrom
adgubrud:bump_excelize
Oct 20, 2026
Merged

adgubrud merged 1 commit into
intel:mainfrom
adgubrud:bump_excelize

Conversation

@adgubrud

Copy link
Copy Markdown
Contributor

Bumps github.com/xuri/excelize/v2 from v2.11.1-0.20260915055537-22f76f9acb94 to v2.11.1-0.20261003002531-6258dcebc4e2, which also bumps the indirect dependency github.com/xuri/efp from v0.0.1 to v0.0.2.

github.com/richardlehane/mscfb remains at v1.0.8, so the patched version excelize requires is retained.

Heads-up on the Go version

This excelize revision raises its own minimum Go version from 1.25.0 to 1.26.0. No toolchain change is needed — PerfSpect already declares go 1.26.0 and builder/build.Dockerfile uses golang:1.27.2. It does mean the go directive can't be lowered below 1.26 while on this excelize.

Verification

  • make and make perfspect-aarch64 both build. The excelize API surface we use (internal/report/render_excel.go, cmd/benchmark/benchmark.go) is unchanged.
  • make test passes for all packages.
  • check_format, check_vet, check_static and check_lint report no issues.
  • Generated a real report with --format xlsx and confirmed the workbook is a valid archive containing the expected sheets and cell values. Also round-tripped the single-target and multi-target renderers plus the styling APIs through excelize.OpenReader.
  • govulncheck reports no vulnerabilities in excelize or its dependencies. Against this baseline, vulnerabilities in imported packages drop from 17 to 14; the stdlib findings and gosec results are unchanged and unrelated to this bump.

🤖 Generated with Claude Code

Bumps github.com/xuri/excelize/v2 from
v2.11.1-0.20260915055537-22f76f9acb94 to
v2.11.1-0.20261003002531-6258dcebc4e2, which also bumps the indirect
dependency github.com/xuri/efp from v0.0.1 to v0.0.2.

github.com/richardlehane/mscfb remains at v1.0.8, so the patched
version excelize requires is retained.

Note that this excelize revision raises its own minimum Go version from
1.25.0 to 1.26.0. PerfSpect already declares go 1.26.0 and the build
container uses golang:1.27.2, so no toolchain change is needed.

Verified:
- amd64 and arm64 binaries build; no API changes in the surface used by
  internal/report/render_excel.go or cmd/benchmark/benchmark.go
- all unit tests pass
- gofmt, go vet, staticcheck and golangci-lint report no issues
- generated a report with --format xlsx and confirmed the workbook is a
  valid archive with the expected sheets and cell values
- govulncheck reports no vulnerabilities in excelize or its
  dependencies; vulnerabilities in imported packages drop from 17 to 14

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@adgubrud
adgubrud requested a review from harp-intel as a code owner October 20, 2026 21:40
@adgubrud
adgubrud merged commit 2258f01 into intel:main Oct 20, 2026
5 checks passed
@adgubrud
adgubrud deleted the bump_excelize branch October 20, 2026 21:46
adgubrud added a commit to adgubrud/PerfSpect that referenced this pull request Oct 21, 2026
Removes the code changes merged in intel#720 from this branch:

- the "pmu enumeration safety" probe script and the
  perfEnumerationFaultsKernel predicate in cmd/metrics/metadata.go
- the sysfs-based event enumeration scripts that replaced
  'perf list --json' on affected targets
- the enumerateEventsFromSysfs parameter on getMetadataScripts and its
  use from the x86 and ARM metadata collectors
- cmd/metrics/metadata_pmu_safety_test.go
- the 'perf list tracepoint' change in the telemetry syscall
  enumeration script

The go.mod/go.sum excelize and mscfb bumps that intel#720 also carried are
intentionally left in place: main has since moved excelize forward again
in intel#731, and reverting them here would downgrade a patched dependency.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant