Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump securego/gosec from 2.21.4 to 2.22.0 #1937

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 10, 2025

Bumps securego/gosec from 2.21.4 to 2.22.0.

Release notes

Sourced from securego/gosec's releases.

v2.22.0

Changelog

  • e0cca6fe95306b7e7790d6f1bf6a7bec6d622459 Update what message for G104 (#1282)
  • 534689b08f588e88a89ffe20eddfdc28c6eeb86e chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  • eb95db1c7689fe5191547206ea06ed422e49eb89 chore(deps): update all dependencies (#1280)
  • 6c6da403f0d52380bb13ea8245eee31f02b952c2 chore(deps): update all dependencies (#1279)
  • b12f51f7d688ab7f51c543813efbb984d466adab Simplify sortIssues implementation (#1277)
  • 54c2185ae643b8df64395652c6e4abbbe9ef1ebc Enable testifylint and fix up lint issues (#1276)
  • 36c81ed69b2279f562bbd511a3bdec49ee488816 Refactor AppendError to check for build.NoGoError (#1273)
  • 9a2d74ffe0740284dfc13d5b2101eeaa4a64f48d chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  • 4c5ad914f3005ad3a45841bd14e5ab7edfc17846 Update README.md (#1274)
  • e21b4d42cf52504b3ab4384ddaa640e75bc9aac0 Rule documentation updates (#1272)
  • 92de0ee7a2bef8688cdef8744c1e408064eb7683 Replace old golang.org links with new go.dev (#1271)
  • 4fda076e5d8dabc819b30b73f34a50f5ffe19a0f Refactor AppendError to use strings.Contains (#1270)
  • b01f49e3668456e9ec552b6ddc5ff3a41511a071 Simplify Analyzer.ignore by reducing nesting (#1269)
  • b62cc3316d652d3b15d5b76538cf26c968baba87 Improve capitalization in AI API flags descriptions (#1267)
  • bc77d16301725b9d97bd3f4a7b216d83e3c30c64 Remove unused golint dependency (#1266)
  • ef1a35faf9f24e25ff6ccb977083ad56456cbc01 Simplify tests by using GinkgoT().TempDir() (#1265)
  • 09b914371ececcf6e010f570551ec311c7848e12 Documentation on adding new rules and analyzers (#1262)
  • 1bd92a8e30a87a62cff3d792365f7e983c3c9291 chore(deps): update all dependencies (#1268)
  • ca55eca3def12baad606a310b13b35168debde4f Update to go 1.22.10 and 1.23.4 versions (#1264)
  • 329cad89ee05f29dc8ce797823a10960e558cf03 chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  • 08beb25d41bef7c8a9ecab2df84dddf4d486ed17 chore(deps): update all dependencies (#1261)
  • d566be274ef93dea133cb063f1dba82c7476a5a9 chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  • 8c602d0bc45e4a76d2a6079cfa0fa5a88a381ebe fix: revive.redefines-builtin-id lint warnings (#1257)
  • 399e835157aa69a09b4a8d1c14f9afcc203621ae Fix typos in comments and fields
  • 229cf63a09e595e1ddbff532ee64e9826822912f Remove the decryption funtions/methods from G407 check
  • 699cb55eb33630404307a1f99d73cd3ea4181135 Upate go to version 1.23.3 and 1.22.9
  • 9b13cd5ab4766d62429eaadb27a5d662db123222 Fix G115 false positive when going from parsed uint to larger int
  • 08ea2a57db99b9758f1aa4982fadfa5778b672f4 chore(deps): update all dependencies
  • 44156135bfd39b347ec01d2d69b27e50b26f2344 chore(deps): update all dependencies
  • 3274716ce3ce24652ee4476152be9324817f2d91 chore(deps): update all dependencies
  • 1fb6a46eed71931cdac97753cf64c0f1dd73122f chore(deps): update all dependencies
  • d2c92ed7b3bb812e0d8d9295c3034588cc779edf chore(deps): update all dependencies
  • 4fd98728a74b56a1381ec494624c42ae53d2515c Update go version to 1.23.2 and 1.22.8
  • 1501618b90fccbe51cb283a4b21496a0ba86c311 chore(deps): update module google.golang.org/api to v0.201.0
  • 7d33bc1991ba1c97d8ebce9b0d1231acffbbf6ed chore(deps): update all dependencies
  • bd8b4b4ece209d24dfc86bb15c708182b091a4de chore(deps): update all dependencies
  • 1216c9b96b9c5beaa43590ad7b3c689352266567 Fix the cosign step to authenticate with the container registry
  • 50d1b4ae6b4970ef1446f4671a22ea1d30ea99b8 chore(deps): update module google.golang.org/api to v0.199.0
  • c0ba7c7a74f811c56b33b5905b0524e34acbbf0f Update the gosec to v2.21.4 in the Github action
  • a3299ce10ca6f800a292567bdd5e89cbb04babce Add the version into goreleaser config
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.21.4 to 2.22.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.21.4...v2.22.0)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 10, 2025
@erikdubbelboer erikdubbelboer merged commit 0a69906 into master Jan 10, 2025
15 checks passed
@erikdubbelboer erikdubbelboer deleted the dependabot/github_actions/securego/gosec-2.22.0 branch January 10, 2025 04:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant