Skip to content

chore(deps): bump github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0#704

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0
Open

chore(deps): bump github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0#704
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0.

Release notes

Sourced from github.com/xuri/excelize/v2's releases.

v2.11.0

We are pleased to announce the release of version 2.11.0. Featured are a handful of new areas of functionality and numerous bug fixes.

A summary of changes is available in the Release Notes. A full list of changes is available in the changelog.

Release Notes

The most notable changes in this release are:

Breaking Change

  • Upgraded requirement: Go language version is 1.25.0 or later, due to upgrading dependency package golang.org/x/net
  • Breaking changes for the AddChart, AddChartSheet and AddShape functions
    • Change Title field data type of Chart from []RichTextRun to ChartTitle
    • Change Line field data type of Shape from ShapeLine to LineOptions
    • Renamed data type ChartDashType to LineDashType
    • Renamed data type ChartLineType to LineType
    • Renamed data type ChartLine to LineOptions

Security

  • Check row number when reading worksheet to prevent unbounded memory allocation (CVE-2026-54063), related security advisories GHSA-h69g-9hx6-f3v4
  • Prevent attacker-controlled allocations by validating against worksheet row number overflow maximum limitation (CVE-2026-59161), related security advisories GHSA-q5j5-6p94-4gwc
  • Prevent panic on getting cell value with invalid shared string table index (CVE-2026-59162), related security advisories GHSA-fx5j-qcqg-grpf

Notable Features

  • Added new ChartTitle data type
  • Added new PivotTableShowValuesAs data type
  • Added new PivotTableShowValuesAsType enumeration
  • Added 3 new exported error variables: ErrPivotTableShowValuesAsBaseField, ErrPivotTableShowValuesAsBaseItem and ErrUnsupportedPivotTableShowValuesAsType
  • Added new field ShowValuesAs in PivotTableField data type
  • Added new field SelectedItems in PivotTableOptions and SlicerOptions data types
  • Added new function AutoFitColWidth to support auto fit columns width, related issue #92
  • The SetSheetName function allow sheet rename for invalid source names, related issue #548
  • The CalcCellValue function supports tilde wildcard criteria
  • The CalcCellValue function supports implicit intersection and fixes regex criteria anchoring
  • The CalcCellValue function supports 3D references across sheet ranges, related issue #2303
  • The CalcCellValue function supports returning formula calculation result with raw cell value, related issue #2316
  • The AddPivotTable function supports checking whether the same data field appears in pivot table column, rows and filter fields, to prevent generating a corrupted workbook
  • The AddPivotTable and GetPivotTables functions support setting and getting show values as of pivot table data fields, related issue #2340
  • The AddPivotTable, AddSlicer, GetPivotTables and GetSlicers functions support setting and getting selected items for pivot table and pivot table slicer, related issue #2154
  • The AddChart and AddChartSheet functions support setting chart title with formula
  • The AddChart and AddChartSheet functions support setting chart title and chart axis title's layout
  • The AddChart and AddChartSheet functions support setting line format for chart title and chart axis title
  • The AddShape function supports setting line format of shapes
  • The NewStyle function supports auto foreground and background color when creating solid fill style when no custom color value is specified

Compatibility Improvements

... (truncated)

Commits
  • 90ff348 This closes #2344, fixes CalcCellValue function returning incorrect calculati...
  • 09f0656 This fixes #548, allow sheet rename for invalid source names (#2345)
  • 93f0b3c This fixes GHSA-q5j5-6p94-4gwc and GHSA-fx5j-qcqg-grpf (#2331)
  • 1213a8b This related with #2340, implement unsupported pivot table show values as types
  • b7e098e This related with #2340, fix invalid pivot table show values as base field index
  • 4ae56a6 This closes #2340, initialized support set and get show value as of pivot tab...
  • 2e6a05b Update dependencies module to fix vulnerabilities
  • c88ce10 This closes #2337, clear shared formula when overwriting with a normal formul...
  • eb84319 This compact sparse worksheet rows in linear time, Go 1.21 and later required...
  • 875b959 Check row number when reading worksheet for improve security
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/xuri/excelize/v2](https://github.com/xuri/excelize) from 2.10.1 to 2.11.0.
- [Release notes](https://github.com/xuri/excelize/releases)
- [Commits](qax-os/excelize@v2.10.1...v2.11.0)

---
updated-dependencies:
- dependency-name: github.com/xuri/excelize/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 7, 2026
@dependabot dependabot Bot requested a review from harp-intel as a code owner July 7, 2026 13:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants