Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 12, 2024

Bumps securego/gosec from 2.18.2 to 2.19.0.

Release notes

Sourced from securego/gosec's releases.

v2.19.0

Changelog

  • 26e57d6 Update CI to go version 1.22
  • e60b8d8 chore(deps): update all dependencies
  • 1285eb7 chore(deps): update all dependencies
  • cf4ab3e chore(deps): update all dependencies
  • 277553c chore(deps): update all dependencies
  • 57ec76b chore(deps): update all dependencies
  • 8fa46c1 chore(deps): update dependency babel-standalone to v7.23.7
  • 53aa3f7 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  • 187adab chore(deps): update all dependencies
  • e1f27ba chore(deps): update actions/setup-go action to v5
  • 2aad3f0 Fix lint warnings by properly formatting the files
  • 0e2a618 chore: Refactor Sample Code to Separate Files
  • bc03d1c Update go version to 1.21.5 and 1.20.12 (#1084)
  • 79a6b47 chore(deps): update all dependencies (#1080)
  • eb256a7 Ignore the issues from generated files when using the analysis framework (#1079)
  • 43b7cbf Update README with upload-sarif v2 (#1078)
  • fece498 chore(deps): update dependency babel-standalone to v7.23.4
  • 24c614b Added ppc64le support
  • c736581 chore(deps): update all dependencies
  • 3188e3f Ensure ignores are handled properly for multi-line issues
  • 6d56592 Update Go to version 1.21.4 and 1.20.11
  • 870103b chore(deps): update module golang.org/x/text to v0.14.0
  • b50e493 chore(deps): update all dependencies
  • 2f9965b Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  • fa1b74d Avoid allocations with (*regexp.Regexp).MatchString
  • 64bbe90 Fix some typos
  • d9071e3 Update local installation instructions by removing the details for Go 1.16
  • 5d837bc Update gosec version to 2.18.2 in the action
Commits
  • 26e57d6 Update CI to go version 1.22
  • e60b8d8 chore(deps): update all dependencies
  • 1285eb7 chore(deps): update all dependencies
  • cf4ab3e chore(deps): update all dependencies
  • 277553c chore(deps): update all dependencies
  • 57ec76b chore(deps): update all dependencies
  • 8fa46c1 chore(deps): update dependency babel-standalone to v7.23.7
  • 53aa3f7 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  • 187adab chore(deps): update all dependencies
  • e1f27ba chore(deps): update actions/setup-go action to v5
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.18.2 to 2.19.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@55d7949...26e57d6)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 12, 2024
@hectorm hectorm merged commit eac5719 into master Feb 12, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/securego/gosec-2.19.0 branch February 12, 2024 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant