[dependabot]

Bumps github.com/jonhadfield/gosn-v2 from 0.0.0-20260927092733-d8be686e94c3 to 0.1.0.

Release notes

Sourced from github.com/jonhadfield/gosn-v2's releases.

v0.1.0

First tagged release of gosn-v2.

See CHANGELOG.md for details.

go get github.com/jonhadfield/gosn-v2@v0.1.0

Changelog

Sourced from github.com/jonhadfield/gosn-v2's changelog.

0.1.0 - 2026-10-10

First tagged release of the post-split library (auth, session, items, cache, crypto, common).

Added

• Inline // ggignore labels on remaining test fixtures and a PasswordNonce false positive so GitGuardian treats them as non-leaks.
• TestReadExportJSONFixtures covering parse of test.json and testuser-encrypted-backup.txt while Session.Export / Session.Import remain commented out since the package split.

Fixed

• Session key derivation for keys of 32 bytes or longer (no longer pads a full key as if it were a password).
• Rate-limit backoff test no longer depends on wall-clock sleep duration.
• Sync token reset no longer prints to stdout.

Changed

• Apps can use separate keyring session slots.
• CI test concurrency is keyed by branch.
• Documentation notes tagged releases; install examples pin v0.1.0.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[jonhadfield]

Superseded: main now depends on gosn-v2 v0.1.1-0.20261102073236-6387103cbc26, which includes v0.1.0 plus jonhadfield/gosn-v2#108.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.