Skip to content

Go: Bump github.com/securego/gosec/v2 from 2.15.0 to 2.17.0#7033

Merged
openshift-merge-robot merged 4 commits intomainfrom
dependabot/go_modules/github.com/securego/gosec/v2-2.17.0
Aug 28, 2023
Merged

Go: Bump github.com/securego/gosec/v2 from 2.15.0 to 2.17.0#7033
openshift-merge-robot merged 4 commits intomainfrom
dependabot/go_modules/github.com/securego/gosec/v2-2.17.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 21, 2023 •
edited
Loading

Bumps github.com/securego/gosec/v2 from 2.15.0 to 2.17.0.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.17.0

Changelog

  • a89e9d5 Enable go 1.21.0 in the CI build (#998)
  • 4b458c4 chore(deps): update all dependencies (#997)
  • 7d51bfe Update to go version 1.20.7 and 1.19.12 (#993)
  • fc2f66b chore(deps): update all dependencies (#992)
  • 2cf2f96 chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  • bf7feda fix: correctly identify infixed concats as potential SQL injections (#987)
  • 2292ed5 chore(deps): update all dependencies (#989)
  • fc570b6 Add a new flag terse to show only the results and summary (#986)
  • 36f6933 Switch to a maintained fork of zxcvbn module (#984)
  • ed7b334 Fix dependencies after bot update (#983)
  • e76ad70 chore(deps): update all dependencies (#982)
  • 3a6fd99 Update to Go version 1.19.11 and 1.20.6 (#981)
  • ea39309 Fix and tidy the dependencies (#977)
  • ef8f560 chore(deps): update all dependencies (#976)
  • 17b7d31 Update README file with new rule (#975)
  • a018cf0 Feature: G602 Slice Bound Checking (#973)
  • 82364a7 chore(deps): update all dependencies (#974)
  • abeab10 Feature: G101 match variable values and names (#971)
  • b824c10 Update build script to go version 1.20.5
  • 022584d chore(deps): update all dependencies
  • bd58600 Recognize struct field in G601
  • 1457921 Remove the depguard from the list of enabled linters
  • 1f68996 Fix typos in comments, vars and tests
  • e148465 chore(deps): update all dependencies
  • 9120883 Fix no-sec alternative tag (#962)
  • 87cc45e Use image digest instead of tag when signing the released image with cosign (#960)
  • 6df05bd Update gosec image version to 2.16.0 in the Github action (#959)

v2.16.0

Changelog

  • c5ea1b7 Update cosign to latest version in release Github action (#958)
  • 8632a8c chore(deps): update all dependencies (#956)
  • ae3c2f7 Update go version in build and release scripts (#957)
  • 970cc29 chore(deps): update all dependencies (#955)
  • 47bfd4e Update Go version to 1.20.3 (#953)
  • 440141a chore(deps): update all dependencies (#952)
  • 7df7baa Fix for Dockerfile smell DL3059 (#951)
  • 2ee3213 README: upgrade GitHub action in examples (#950)
  • 68b5201 enable ginkgolinter linter (#948)
  • 780ebd0 chore(deps): update all dependencies (#947)
  • d6aeaad correct gci linter (#946)
  • 73f0efc remove deprecated linters
  • aef69b3 increase timeout to 5m
  • 6bad723 chore(deps): update all dependencies
  • 96bb741 Use the latest version
  • 6a73248 Fix some linting warnings
  • 83fc5e6 Fix lint warning
  • 8e7cf4b Bump the go versions and golanci

... (truncated)

Commits
  • a89e9d5 Enable go 1.21.0 in the CI build (#998)
  • 4b458c4 chore(deps): update all dependencies (#997)
  • 7d51bfe Update to go version 1.20.7 and 1.19.12 (#993)
  • fc2f66b chore(deps): update all dependencies (#992)
  • 2cf2f96 chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  • bf7feda fix: correctly identify infixed concats as potential SQL injections (#987)
  • 2292ed5 chore(deps): update all dependencies (#989)
  • fc570b6 Add a new flag terse to show only the results and summary (#986)
  • 36f6933 Switch to a maintained fork of zxcvbn module (#984)
  • ed7b334 Fix dependencies after bot update (#983)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes. This label is also used on all Dependabot PRs do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. Required by Prow. kind/task Issue is actionable task ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Aug 21, 2023
@dependabot dependabot bot requested a review from a team August 21, 2023 02:23
@dependabot dependabot bot mentioned this pull request Aug 21, 2023
Closed
@netlify
Copy link

netlify bot commented Aug 21, 2023 •
edited
Loading

✅ Deploy Preview for odo-docusaurus-preview canceled.

Name Link
🔨 Latest commit a0d18cb
🔍 Latest deploy log https://app.netlify.com/sites/odo-docusaurus-preview/deploys/64ec89a29b747100080a44a5

@dependabot dependabot bot requested review from feloy and rm3l August 21, 2023 02:23
@openshift-ci
Copy link

openshift-ci bot commented Aug 21, 2023

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot requested a review from kadel August 21, 2023 02:23
@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

OpenShift Unauthenticated Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

NoCluster Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

Unit Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

Validate Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

Kubernetes Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

OpenShift Tests on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

Windows Tests (OCP) on commit ae07339 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Aug 21, 2023 •
edited
Loading

Kubernetes Docs Tests on commit 5a3c33d finished successfully.
View logs: TXT HTML

@rm3l rm3l closed this Aug 21, 2023
@rm3l rm3l reopened this Aug 21, 2023
@redhat-developer redhat-developer deleted a comment from dependabot bot Aug 21, 2023
@dependabot
Go: Bump github.com/securego/gosec/v2 from 2.15.0 to 2.17.0
5bf9368 
Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.15.0 to 2.17.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.15.0...v2.17.0)

---
updated-dependencies:
- dependency-name: github.com/securego/gosec/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.17.0 branch from 4ca3065 to 5bf9368 Compare August 21, 2023 12:00
@feloy feloy closed this Aug 28, 2023
@feloy feloy reopened this Aug 28, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 28, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
Go: Bump github.com/securego/gosec/v2 from 2.15.0 to 2.17.0
078cc28 
Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.15.0 to 2.17.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.15.0...v2.17.0)

---
updated-dependencies:
- dependency-name: github.com/securego/gosec/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.17.0 branch from 5bf9368 to 078cc28 Compare August 28, 2023 11:28
@feloy
Merge branch 'dependabot/go_modules/github.com/securego/gosec/v2-2.17…
a0d18cb 
….0' of https://github.com/redhat-developer/odo into dependabot/go_modules/github.com/securego/gosec/v2-2.17.0
@sonarqubecloud
Copy link

sonarqubecloud bot commented Aug 28, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@feloy
Copy link
Contributor

feloy commented Aug 28, 2023

/unhold

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. Required by Prow. label Aug 28, 2023
@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. Required by Prow. label Aug 28, 2023
@rm3l rm3l added this to the v3.15.0 🚀 milestone Aug 28, 2023
@openshift-merge-robot openshift-merge-robot merged commit 319adfa into main Aug 28, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/securego/gosec/v2-2.17.0 branch August 28, 2023 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rm3l rm3l rm3l approved these changes

@feloy feloy Awaiting requested review from feloy

@kadel kadel Awaiting requested review from kadel

Assignees

@rm3l rm3l

Labels

area/dependency Issues or PRs related to dependency changes. This label is also used on all Dependabot PRs kind/task Issue is actionable task lgtm Indicates that a PR is ready to be merged. Required by Prow. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

v3.15.0 🚀

Development

Successfully merging this pull request may close these issues.

3 participants

@feloy @rm3l @openshift-merge-robot