build(deps): Bump mvdan.cc/gofumpt from 0.7.0 to 0.10.0

[dependabot]

Bumps mvdan.cc/gofumpt from 0.7.0 to 0.10.0.

Release notes

Sourced from mvdan.cc/gofumpt's releases.

v0.10.0

This release is based on Go 1.26's gofmt, and requires Go 1.25 or later.

A new rule is introduced to drop unnecessary parentheses around expressions where the inner expression is unambiguous on its own, such as f((3)). Parentheses are kept where they are useful, such as on binary expressions. See #44.

A new rule is introduced to require multi-line function calls to match the opening and closing parenthesis in terms of the use of newlines. See #74.

The -extra flag now accepts a comma-separated list of rule names to enable individual extra rules, rather than enabling all of them at once. See #339.

The following changes are included as well:

• Avoid crashing on go.mod files without a module directive - #350
• Avoid failing when an ignored directory cannot be read - #351
• Avoid prefixing more kinds of commented-out Go code with spaces - #230
• Avoid prefixing a shebang comment with a space - #237
• Narrow the newlines on assignments rule to ignore complex cases - #354
• Fix three bugs which caused a second gofumpt run to make changes - #132, #345

Binaries built on go version go1.26.2 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release! New tiers with rewards are available as well.

v0.9.2

This release moves the "clothe naked returns" rule under gofumpt -extra, following the discussion in mvdan/gofumpt#285.

Binaries built on go version go1.25.3 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release!

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

v0.9.1

This is a bugfix release to address a regression in detecting comment directives with special characters such as //golangcitest:config_path.

Binaries built on go version go1.25.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release!

v0.9.0

This release is based on Go 1.25's gofmt, and requires Go 1.24 or later.

A new rule is introduced to "clothe" naked returns for the sake of clarity. While there is nothing wrong with naming results in function signatures, using lone return statements can be confusing to the reader.

Go 1.25's ignore directives in go.mod files are now obeyed; any directories within the module matching any of the patterns are now omitted when walking directories, such as with gofumpt -w ..

... (truncated)

Changelog

Sourced from mvdan.cc/gofumpt's changelog.

[v0.10.0] - 2026-05-04

This release is based on Go 1.26's gofmt, and requires Go 1.25 or later.

A new rule is introduced to drop unnecessary parentheses around expressions where the inner expression is unambiguous on its own, such as f((3)). Parentheses are kept where they are useful, such as on binary expressions. See #44.

A new rule is introduced to require multi-line function calls to match the opening and closing parenthesis in terms of the use of newlines. See #74.

The -extra flag now accepts a comma-separated list of rule names to enable individual extra rules, rather than enabling all of them at once. See #339.

The following changes are included as well:

• Avoid crashing on go.mod files without a module directive - #350
• Avoid failing when an ignored directory cannot be read - #351
• Avoid prefixing more kinds of commented-out Go code with spaces - #230
• Avoid prefixing a shebang comment with a space - #237
• Narrow the newlines on assignments rule to ignore complex cases - #354
• Fix three bugs which caused a second gofumpt run to make changes - #132, #345

[v0.9.1] - 2025-09-07

This is a bugfix release to address a regression in detecting comment directives with special characters such as //golangcitest:config_path.

[v0.9.0] - 2025-09-02

This release is based on Go 1.25's gofmt, and requires Go 1.24 or later.

A new rule is introduced to "clothe" naked returns for the sake of clarity. While there is nothing wrong with naming results in function signatures, using lone return statements can be confusing to the reader.

Go 1.25's ignore directives in go.mod files are now obeyed; any directories within the module matching any of the patterns are now omitted when walking directories, such as with gofumpt -w ..

Module information is now loaded via Go's x/mod/modfile package rather than executing go mod edit -json, which is way faster. This should result in moderate speed-ups when formatting many directories.

[v0.8.0] - 2025-04-13

This release is based on Go 1.24's gofmt, and requires Go 1.23 or later.

The following changes are included:

... (truncated)

Commits

• 1405025 CHANGELOG: add entry for v0.10.0
• 3e7fd1f format: narrow scope of newline-after-assignment rule
• 64a87f4 format: leave shebang comments on the first line alone
• 529740e format: align opening and closing parens in multi-line calls
• a7ca065 format: add empty line after trailing inline comment between decls
• 018b5c8 format: re-sort imports after joining adjacent single-line decls
• d9b8a3c format: separate adjacent long func decls with a blank line
• de56e49 format: detect commented-out code by parsing as Go
• e476e62 testdata: add cases showing the commented-code heuristic limits
• ba22a6d format: remove definitely useless parentheses
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)