[dependabot]

Bumps the go-dependencies group with 8 updates:

Package	From	To
github.com/antchfx/htmlquery	1.3.6	1.3.7
github.com/antchfx/xmlquery	1.5.1	1.5.2
github.com/chromedp/chromedp	0.16.0	0.20.1
github.com/wailsapp/wails/v3	3.0.0-beta.27	3.0.0-beta.28
golang.org/x/crypto	0.57.0	0.58.0
golang.org/x/net	0.59.0	0.60.0
golang.org/x/sys	0.48.0	0.49.0
golang.org/x/text	0.42.0	0.43.0

Updates github.com/antchfx/htmlquery from 1.3.6 to 1.3.7

Release notes

Sourced from github.com/antchfx/htmlquery's releases.

v1.3.7

• #81 Added LoadURLWithClient() method to support custom http.Client execution for URL requests by @​mig-af
• Updated antchfx/xpath to v1.3.9.

Commits

• 2e283f0 ci: update Go version matrix to 1.23 and 1.24 in test workflow
• 4a0e295 deps: bump antchfx/xpath to v1.3.9
• bfb8bdf Merge PR '#81'
• 8048e79 feat: add LoadURLWithClient to support custom HTTP client
• See full diff in compare view

Updates github.com/antchfx/xmlquery from 1.5.1 to 1.5.2

Release notes

Sourced from github.com/antchfx/xmlquery's releases.

v1.5.2

deps: update antchfx/xpath to v1.3.9 (https://github.com/antchfx/xpath/releases/tag/v1.3.9)

Commits

• fb77be1 ci: update Go version matrix to 1.23 and 1.24 in test workflow
• 5fbf3fd deps: update antchfx/xpath to v1.3.9
• See full diff in compare view

Updates github.com/chromedp/chromedp from 0.16.0 to 0.20.1

Release notes

Sourced from github.com/chromedp/chromedp's releases.

v0.20.1

Documentation only. The README, the package documentation and the docs have the current versions (chromedp v0.20.0, cdproto v0.157.8, remote v0.2.0), the CI matrix and the release history. The README describes termcast and the 43 programs of chromedp/examples.

v0.20.0

chromedp supports Go 1.25 and later. Before this release, the module needed Go 1.27 (see #1536).

• The JSON types come from github.com/chromedp/cdproto/cdp/jsonv2. With Go 1.27 or GOEXPERIMENT=jsonv2 they are aliases of the types of the standard encoding/json/v2 and jsontext, so the public API is the same. With Go 1.25 and 1.26 they come from github.com/go-json-experiment/json.
• The modules chromedp, remote and test use go 1.25 and cdproto v0.157.8.
• The CI runs Go 1.25, 1.26 and stable on Linux, stable on Windows and macOS, and the experiment and the compatibility tag.

v0.19.1

Documentation only. The README and the package documentation describe termcast, which draws the screen of a page in a terminal, and the 43 programs of chromedp/examples.

v0.19.0

This release adds new actions and options, fixes bugs, and works on Linux, Windows and macOS in CI. See docs/MIGRATION.md for every change.

New

• Tap and TapXY send a touch tap.
• DragAndDrop and DragAndDropXY drag and drop with the mouse and with HTML5 drag and drop.
• Console reads the console, the uncaught exceptions and the browser log of a page as one iterator.
• ExposeFunc calls a Go function from the page, like exposeFunction in Puppeteer.
• PrintToPDF takes options for the paper, the margins, the scale, the page ranges, the header and the footer, the outline and a stream.
• WithNewWindow chooses a window or a tab for a new target. NoInheritEnv starts the browser with only the given variables. WithDetachOnCancel leaves the tab open when the context ends.
• EvalAwaitPromise waits for a promise that an expression returns.

Fixed

• Call on a Target or a Browser returns an error when the connection to the browser is lost, and does not hang.
• The exec allocator keeps the order of the flags.
• WaitNotPresent works with a JSPath that gives null or an empty list.
• Evaluate returns ErrJSNull for null when the type cannot be nil, and Text works on a text node.
• The pipe transport, the allocator and the tests work on Windows and macOS, and the default browser lookup on Windows falls back to Microsoft Edge.

Notes

• Use errors.Is(err, context.Canceled) and not == for the error of a call after the connection was lost.
• The tests run on Linux, Windows and macOS in CI, and every night against the stable, beta and dev channels of headless-shell.
• The module github.com/chromedp/chromedp/remote is unchanged and stays at remote/v0.1.0.

Commits

• dddfecf Sweep the documentation
• 156907f Require chromedp v0.20.0 in the test module
• a5acf48 Require chromedp v0.20.0 in the remote module
• 4a5437d Support Go 1.25 and later
• 3c56b8b Describe termcast and the new examples in the README and the package document...
• 67e1ea2 Update the actions of the workflows to checkout v7 and setup-go v7
• 8b41617 Wait longer for the report of an HTML5 drag, and ignore the Windows pipe swit...
• 7b6b962 Fix three tests that could pass for the wrong reason
• a6e93be Name the variables that a browser can need with NoInheritEnv
• 2bc273c Close the PDF stream when a read fails and document the zero values
• Additional commits viewable in compare view

Updates github.com/wailsapp/wails/v3 from 3.0.0-beta.27 to 3.0.0-beta.28

Release notes

Sourced from github.com/wailsapp/wails/v3's releases.

Wails v3.0.0-beta.28

Wails v3 Beta Release - v3.0.0-beta.28

Fixed

• Keep macOS app output outside file providers in PR by @​taliesin-ai
• Complete setup wizard and show system details in PR by @​taliesin-ai
• Improve WebView2 recovery error handling and resource cleanup on Windows in PR by @​leaanthony
• Improve WebView2 recovery on Windows to prevent app crashes and controller strandings in PR by @​taliesin-ai
• Correct macOS media authorization guidance in PR by @​taliesin-ai
• Fix right-clicking a Linux system tray icon running the click handler as well as opening the menu, so an attached window toggled on every right-click (#6018)
• Keep WebView2 callback handlers alive until native release on Windows in PR by @​taliesin-ai

---

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.28

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

Commits

• 4adbee9 chore(v3): bump to v3.0.0-beta.28 and update changelog
• 3a83b2c chore(changelog): auto-add entry for PR #6225 — fix(v3): keep macOS app outpu...
• 2db7e61 fix(v3): keep macOS app output outside file providers (#6225)
• f1e0cde chore(changelog): auto-add entry for PR #6224 — fix(v3): complete setup wizar...
• 1736bc8 fix(v3): complete setup wizard and show system details (#6224)
• aab280f chore(changelog): auto-add entry for PR #6222 — fix(v3/windows): finish WebVi...
• ed0d5d9 fix(v3/windows): finish WebView2 recovery error handling and cleanup (#6222)
• 94c2743 chore(changelog): auto-add entry for PR #6220 — #6167 [v3][Windows] WebView2 ...
• 2abd786 #6167 [v3][Windows] WebView2 recovery failures can still exit the app or stra...
• 809434c chore(changelog): auto-add entry for PR #6221 — docs(v3): correct macOS media...
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits

• 8fdf07b go.mod: update golang.org/x dependencies
• 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
• c3db4df acme: prefer test log helpers in test contexts
• 4e01a84 acme: adds support for profiles draft
• 8f0f111 ssh: check that no Unicode-aware string function is used
• b39ff6d ssh: add certificate algorithms for ML-DSA keys
• 4465db3 ssh: add the ML-DSA public key algorithms
• 83e695b ssh: implement ETM mode for CBC ciphers
• 946083a ssh: only drop a trailing carriage return
• 543dde9 ssh: accept known_hosts entries with a multi-word comment
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.59.0 to 0.60.0

Commits

• 18ece0c http2: prevent crash due to HPACK encoder race
• 2d03f9d http2: avoid 2x refund on stream close with buffered data
• cc7d34f http2: avoid excessive work on initial window changes
• 57f4235 http2: apply header limits to Trailer headers too
• 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
• 2824783 http2: delete malformed framing-related headers
• b13c0c1 internal/http3: delete HTTP/3 package
• 520c891 quic: off-path support in loss/congestion/rtt
• 656874f quic: determine local address for connections
• a818e16 quic: add a pathAddrs type, holding a local/peer address pair
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits

• b6b8557 unix/linux: unify ppc64x syscall wrappers
• aab6988 unix: add PrctlArg5Ptr
• cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
• 782b836 unix/linux: don't warn about closed stderr from child process
• 61592fb unix: return syscall error in *listxattrNS on BSD
• c136fda unix/linux/Dockerfile: update to Go 1.26.8
• f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
• 67f850b unix: update linux to v7.2
• eb1f659 unix: add O_EXEC and O_SEARCH on darwin
• 51bc731 unix: add Mmsghdr for linux
• Additional commits viewable in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits

• ac40b0f go.mod: update golang.org/x dependencies
• 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
• d0ecd29 secure/bidirule: lazily precompute ASCII table
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions