build(deps): bump the golang group across 1 directory with 6 updates

[dependabot]

Bumps the golang group with 5 updates in the / directory:

Package	From	To
github.com/buger/jsonparser	1.2.0	1.6.1
github.com/mattn/go-shellwords	1.0.13	1.0.14
github.com/onsi/ginkgo/v2	2.32.0	2.32.1
github.com/onsi/gomega	1.40.0	1.42.1
sigs.k8s.io/knftables	0.0.21	0.0.22

Updates github.com/buger/jsonparser from 1.2.0 to 1.6.1

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.6.1 — Fastest across all payload sizes (now benchmarks vs gjson + sonic)

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip

Ported gjson's >'\\' single-comparison fast-skip to three hot loops. The trick skips all non-structural bytes (those > 0x5C) in one unsigned comparison per byte, reducing branch overhead.

Payload	Before	After	Change
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Now benchmarks against gjson and sonic

Added tidwall/gjson (15.5k⭐) and bytedance/sonic (9.6k⭐) to the benchmark suite.

Large payload — the definitive ranking:

Library	time/op	allocs
jsonparser	20,114 ns	0
gjson	22,756 ns	2
easyjson	33,771 ns	134
sonic	41,053 ns	71
ffjson	59,063 ns	144
encoding/json	130,565 ns	147

jsonparser is the fastest across ALL payload sizes and the only zero-allocation parser.

Full changelog: CHANGELOG.md

v1.6.0 — Append function + zero open known issues

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings, 0 open known issues)

New API: Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

Append(data, value, keys...) ([]byte, error) — clean array-append API. Works on top-level and nested arrays. Auto-creates missing paths as single-element arrays. No need for [N] path syntax.

Bug fixes — all known issues resolved

KI	Fix
KI-2	ParseInt("-") now returns MalformedValueError (was returning 0, nil)
KI-3	Disposition corrected to fixed (auto-coerce was implemented in v1.3.0)

... (truncated)

Changelog

Sourced from github.com/buger/jsonparser's changelog.

[v1.6.1] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip in hot loops

Ported gjson's >'\\' fast-skip trick to three inner loops in parser.go: stringEndConfig tail, blockEndConfig, and searchKeysConfig. The trick uses a single unsigned comparison (byte > 0x5C) to skip all non-structural bytes in bulk, reducing per-byte branch overhead.

Payload	Before	After	Improvement
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Zero allocations maintained on all paths.

Benchmarks — now includes gjson and sonic

Added tidwall/gjson (15.5k⭐, path-based parser like jsonparser) and bytedance/sonic (9.6k⭐, SIMD-accelerated deserializer) to the benchmark suite.

Final leaderboard (large payload):

Library	time/op	bytes/op	allocs/op
buger/jsonparser	20,114	0	0
tidwall/gjson	22,756	28,672	2
mailru/easyjson	33,771	4,016	134
bytedance/sonic	41,053	31,368	71
pquerna/ffjson	59,063	4,822	144
encoding/json	130,565	4,432	147

jsonparser is the fastest across all payload sizes and the only zero-allocation parser.

---

[v1.6.0] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

New API — Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

... (truncated)

Commits

• 5663ba4 v1.6.1: gjson-style fast-skip optimization + benchmarks vs gjson/sonic
• caa05b0 perf: gjson-style fast-skip in hot loops + benchmarks vs gjson/sonic
• f1c83ac docs: remove anniversary article from repo (private draft)
• 6c82735 docs: ten-year anniversary article with personal backstory and transitive deps
• 3005d5b v1.6.0: Append function + all KI fixes (zero open known issues)
• a55c29b v1.5.1: 6.1x large-payload speedup + fresh benchmarks
• 09dbcf6 perf: SWAR string scan in stringEndConfig (8% large-payload speedup)
• df5ae5b perf: bound stringEnd backslash scan to string body (5.8x large-payload speedup)
• ae21251 Add MC/DC witnesses for SYS-REQ-115 (Config) and SYS-REQ-116 (ReaderParser)
• dfb33c1 docs: complete CHANGELOG with v1.3.0–v1.5.0 entries, all mentioning ReqProof ...
• Additional commits viewable in compare view

Updates github.com/mattn/go-shellwords from 1.0.13 to 1.0.14

Commits

• 2b31b13 Merge pull request #72 from mattn/add-gitignore
• 925f016 Add .gitignore for .codex
• ad15017 Merge pull request #71 from mattn/refactor-buffers
• a3c716b Use byte buffers in Parse to reduce allocations
• a9af5c2 Merge pull request #70 from mattn/add-benchmarks
• 6eb4f8d Add benchmarks for Parse variants
• a51cda8 Merge pull request #69 from mattn/followups
• 2488652 Fix comment handling inside backticks and drop empty substitution words
• 5bec8b9 Merge pull request #55 from aTTiny73/feature/exclude-separator
• 4052da2 Merge remote-tracking branch 'origin/master' into pr55
• Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.1

2.32.1

Fixes

• Defer AfterAll until repeated spec completes [e647b3b]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.1

Fixes

• Defer AfterAll until repeated spec completes [e647b3b]

Commits

• f2d0f65 v2.32.1
• e647b3b Defer AfterAll until repeated spec completes
• 09bbf5f Properly Punctuate Possessive Pronoun "Its"
• See full diff in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• ced6c1c v1.42.1
• 2beb9fb v1.42.1 (full)
• 006cd2c bump al lthe things
• 35ca084 v1.42.0
• d72697b v1.42.0 (full)
• 1f95d86 add a set of claude skills as a marketplace plugin
• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.45.0 to 0.46.0

Commits

• d58dcfa unix: add GPIO constants and structs
• See full diff in compare view

Updates sigs.k8s.io/knftables from 0.0.21 to 0.0.22

Changelog

Sourced from sigs.k8s.io/knftables's changelog.

v0.0.22

• Add UseNetlink option to knftables.New() to make it use netlink for List* methods. This is much more efficient than using nft list, but is currently considered experimental. (@aojea)

Commits

• 69a6e3f v0.0.22
• 2cbbcd2 Merge pull request #44 from danwinship/flip-netlink-default
• 9709962 Turn off netlink support by default, add UseNetlink option
• 2163caa Merge pull request #43 from aojea/netlinl_optional
• 4c307fc Fix response to blank "make"
• 2477e96 update golang modules
• f2c1170 Merge pull request #38 from aojea/netlink
• 5d30712 workflows: define global GO_VERSION variable
• a3859c6 bump golangci lint
• afc08a7 update vendor
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions