Skip to content

deps: bump github.com/expr-lang/expr from 1.16.9 to 1.17.8#150

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/expr-lang/expr-1.17.8
Open

deps: bump github.com/expr-lang/expr from 1.16.9 to 1.17.8#150
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/expr-lang/expr-1.17.8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Bumps github.com/expr-lang/expr from 1.16.9 to 1.17.8.

Release notes

Sourced from github.com/expr-lang/expr's releases.

v1.17.8

Expr is an expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)

In this release:

  • New feature: added bytes literal syntax (#894)
  • Improved performance: count comparisons to any (#897)
  • Improved performance: added sum range optimization (#896)
  • Improved performance: added count threshold comparisons (#898)
  • Improved performance: optimize loop iteration with scope pool (#908)
  • Improved performance: added fast paths for min, max, mean, and median (#909)
  • Fixed: ctx into nested custom funcs and Env (#883)
  • Fixed: disable check for missing predicate during parseing (#924)
  • Fixed: detect $env() calls at compile time (#923)
  • Fixed: bounds check to get() (#918)
  • Fixed: validate sortBy order argument type (#912)
  • Fixed: reduce empty array without init val (#911)
  • Fixed: validate arg count before OpCall (#904)
  • Fixed: correct variadic method arg type (#889)

v1.17.7

Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)

This release brings new language features, performance improvements across runtime and compiler, better error handling, and many important bug fixes.

New Features

Support for else if expressions

  • You can now chain conditional branches using else if! (#879)

Unicode escapes in the \u{XXXXXX} format

  • String literals now support Unicode code point escapes such as \u{1F600}. (#882)

Byte slice support in the matches operator

The matches operator now works with []byte, improving interoperability with binary data. (#876)

... (truncated)

Commits
  • 21f4f05 Fix impossible unsigned integer comparisons in Abs() function (#919)
  • 3461fbb perf(vm): optimize loop iteration with scope pool (#908)
  • 94ec86d fix(patcher): ctx into nested custom funcs and Env (#883)
  • 40bda0b Disable check for missing predicate during parseing
  • 552eb1b Disable check for missing predicate during parseing
  • 75a31bc fix(fuzz): skip json unsupported type errors (#928)
  • 391930f chore(ci): add Go 1.26 to test matrix (#929)
  • f0176e7 Update README.md: Added GlassFlow.dev in the list of companies using expr (#927)
  • 2aaa9aa fix(checker): detect $env() calls at compile time (#923)
  • 0785f19 fix(fuzz): skip reflect err for variadic calls (#921)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/expr-lang/expr](https://github.com/expr-lang/expr) from 1.16.9 to 1.17.8.
- [Release notes](https://github.com/expr-lang/expr/releases)
- [Commits](expr-lang/expr@v1.16.9...v1.17.8)

---
updated-dependencies:
- dependency-name: github.com/expr-lang/expr
  dependency-version: 1.17.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 29, 2026

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/expr-lang/expr-1.17.8 branch from c969b8a to c8f5edd Compare May 29, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants