chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1

[dependabot]

Bumps github.com/onsi/gomega from 1.40.0 to 1.42.1.

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• ced6c1c v1.42.1
• 2beb9fb v1.42.1 (full)
• 006cd2c bump al lthe things
• 35ca084 v1.42.0
• d72697b v1.42.0 (full)
• 1f95d86 add a set of claude skills as a marketplace plugin
• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• Additional commits viewable in compare view

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

[opencodezebra]

LGTM ✅ — Clean Dependabot bump of github.com/onsi/gomega from 1.40.0 to 1.42.1 with coherent transitive updates.
Reviewed at 63618cb (round 1)

What This PR Does

Bumps the github.com/onsi/gomega test dependency from 1.40.0 to 1.42.1, pulling in upstream v1.41.0 (new matchers, pointer cycle fix) and v1.42.0/v1.42.1 (dependency bumps). Changes are limited to go.mod and go.sum.

How It Works

• Direct version bump in go.mod from 1.40.0 → 1.42.1.
• Transitive golang.org/x/* packages (crypto, mod, sync, net, sys, term, text, tools) updated to consistent minor versions.
• No source code changes; purely dependency metadata.

Findings

ID	Severity	Finding	Location
F1	🟢	gomega version bumped correctly; go.sum has matching h1 hash, no stale v1.40.0 entry remains	go.mod:16
F2	🟢	All golang.org/x/* transitive bumps are consistent minor version increments with matching go.sum entries	go.mod:22,39-40,63-67
F3	🟢	Upstream v1.42.1 tag confirmed on onsi/gomega (published 2026-06-23), release notes align with observed changes	upstream

Finding Details

🟢 F1: Version coherence

gomega updated to v1.42.1 in go.mod with a matching h1 hash in go.sum. The old v1.40.0 entry has been fully removed from go.sum, indicating a clean replacement.

🟢 F2: Transitive dependency coherence

All golang.org/x/* transitive dependencies received consistent minor version increments. No version conflicts or stale entries detected.

🟢 F3: Upstream legitimacy

The v1.42.1 tag exists on the onsi/gomega repository, published 2026-06-23. Release notes ("Bump Dependencies") align with the transitive updates observed in this PR.

What's Good (🟢)

• Minimal change surface: only go.mod and go.sum touched.
• No source code modifications means zero runtime regression risk from this PR itself.
• Version coherence is clean across direct and transitive dependencies.
• Upstream releases are legitimate and recent.

Baseline Check

• Main already has: gomega v1.40.0 as a test dependency.
• Net-new value: picks up BeASlice/BeAnArray matchers, pointer cycle formatting fix, and dependency freshness.
• No prior review rounds on this PR.

Review Metadata

• Reviewers: rev1 (approve)
• Consensus: approve
• Absent reviewers: none

---

🔴×0 🟡×0 🟢×3 · 💬 Comment @opencodezebra <question> for a follow-up · 🔁 Push new commits or comment @opencodezebra review <fix notes> to re-run the council

[opencodezebra]

Review Council: approved - see the review comment.