Skip to content

chore(deps): bump github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0#704

Merged
adgubrud merged 1 commit into
mainfrom
dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0
Jul 11, 2026
Merged

chore(deps): bump github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0#704
adgubrud merged 1 commit into
mainfrom
dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/xuri/excelize/v2 from 2.10.1 to 2.11.0.

Release notes

Sourced from github.com/xuri/excelize/v2's releases.

v2.11.0

We are pleased to announce the release of version 2.11.0. Featured are a handful of new areas of functionality and numerous bug fixes.

A summary of changes is available in the Release Notes. A full list of changes is available in the changelog.

Release Notes

The most notable changes in this release are:

Breaking Change

  • Upgraded requirement: Go language version is 1.25.0 or later, due to upgrading dependency package golang.org/x/net
  • Breaking changes for the AddChart, AddChartSheet and AddShape functions
    • Change Title field data type of Chart from []RichTextRun to ChartTitle
    • Change Line field data type of Shape from ShapeLine to LineOptions
    • Renamed data type ChartDashType to LineDashType
    • Renamed data type ChartLineType to LineType
    • Renamed data type ChartLine to LineOptions

Security

  • Check row number when reading worksheet to prevent unbounded memory allocation (CVE-2026-54063), related security advisories GHSA-h69g-9hx6-f3v4
  • Prevent attacker-controlled allocations by validating against worksheet row number overflow maximum limitation (CVE-2026-59161), related security advisories GHSA-q5j5-6p94-4gwc
  • Prevent panic on getting cell value with invalid shared string table index (CVE-2026-59162), related security advisories GHSA-fx5j-qcqg-grpf

Notable Features

  • Added new ChartTitle data type
  • Added new PivotTableShowValuesAs data type
  • Added new PivotTableShowValuesAsType enumeration
  • Added 3 new exported error variables: ErrPivotTableShowValuesAsBaseField, ErrPivotTableShowValuesAsBaseItem and ErrUnsupportedPivotTableShowValuesAsType
  • Added new field ShowValuesAs in PivotTableField data type
  • Added new field SelectedItems in PivotTableOptions and SlicerOptions data types
  • Added new function AutoFitColWidth to support auto fit columns width, related issue #92
  • The SetSheetName function allow sheet rename for invalid source names, related issue #548
  • The CalcCellValue function supports tilde wildcard criteria
  • The CalcCellValue function supports implicit intersection and fixes regex criteria anchoring
  • The CalcCellValue function supports 3D references across sheet ranges, related issue #2303
  • The CalcCellValue function supports returning formula calculation result with raw cell value, related issue #2316
  • The AddPivotTable function supports checking whether the same data field appears in pivot table column, rows and filter fields, to prevent generating a corrupted workbook
  • The AddPivotTable and GetPivotTables functions support setting and getting show values as of pivot table data fields, related issue #2340
  • The AddPivotTable, AddSlicer, GetPivotTables and GetSlicers functions support setting and getting selected items for pivot table and pivot table slicer, related issue #2154
  • The AddChart and AddChartSheet functions support setting chart title with formula
  • The AddChart and AddChartSheet functions support setting chart title and chart axis title's layout
  • The AddChart and AddChartSheet functions support setting line format for chart title and chart axis title
  • The AddShape function supports setting line format of shapes
  • The NewStyle function supports auto foreground and background color when creating solid fill style when no custom color value is specified

Compatibility Improvements

... (truncated)

Commits
  • 90ff348 This closes #2344, fixes CalcCellValue function returning incorrect calculati...
  • 09f0656 This fixes #548, allow sheet rename for invalid source names (#2345)
  • 93f0b3c This fixes GHSA-q5j5-6p94-4gwc and GHSA-fx5j-qcqg-grpf (#2331)
  • 1213a8b This related with #2340, implement unsupported pivot table show values as types
  • b7e098e This related with #2340, fix invalid pivot table show values as base field index
  • 4ae56a6 This closes #2340, initialized support set and get show value as of pivot tab...
  • 2e6a05b Update dependencies module to fix vulnerabilities
  • c88ce10 This closes #2337, clear shared formula when overwriting with a normal formul...
  • eb84319 This compact sparse worksheet rows in linear time, Go 1.21 and later required...
  • 875b959 Check row number when reading worksheet for improve security
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 7, 2026
@dependabot dependabot Bot requested a review from harp-intel as a code owner July 7, 2026 13:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 7, 2026
@adgubrud

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [github.com/xuri/excelize/v2](https://github.com/xuri/excelize) from 2.10.1 to 2.11.0.
- [Release notes](https://github.com/xuri/excelize/releases)
- [Commits](qax-os/excelize@v2.10.1...v2.11.0)

---
updated-dependencies:
- dependency-name: github.com/xuri/excelize/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0 branch from 5635851 to 49beb9e Compare July 11, 2026 20:10
@adgubrud adgubrud merged commit 1dbabf8 into main Jul 11, 2026
4 of 5 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/xuri/excelize/v2-2.11.0 branch July 11, 2026 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant