Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 27, 2025

Bumps securego/gosec from 2.22.5 to 2.22.7.

Release notes

Sourced from securego/gosec's releases.

v2.22.7

Changelog

  • 32975f4bab0d7b683a88756aaf3fa5502188b476 Fix crash in hardcoded_nonce analyzer
  • 6ea6b35e61f367312f4ec362440c98891830286d Update go action to use release v2.22.6

v2.22.6

Changelog

  • bc3f2145b52adab91f2bee2686c9ad65e65005d6 Update go version to 1.24.5 and 1.23.11 in the CI
  • 925741b7eff92a31663cb1d4e84d809345029883 chore(deps): update module google.golang.org/api to v0.242.0
  • 59ae7e9e275d7dce03bb9c37432b7b3575dbe5fc chore(deps): update all dependencies
  • e7abd9e3482c9ba37761c7e39dad696d2fd7bedb chore(deps): update all dependencies
  • 35e7bc1a94c4df54c5f3f5debd3241b752c65a1a chore(deps): update all dependencies
  • 2d1ed95a0be84f9468a177e96285ab901051819c chore(deps): update all dependencies
  • 4a8cb4609fccc267e012189996cad9b08f2f2af8 Do not allow dashes in file names
  • bcc8afbe30446f2660a7b6b6909541e12fa28239 Update gosec to version 2.22.5 in Github action
Commits
  • 32975f4 Fix crash in hardcoded_nonce analyzer
  • 6ea6b35 Update go action to use release v2.22.6
  • bc3f214 Update go version to 1.24.5 and 1.23.11 in the CI
  • 925741b chore(deps): update module google.golang.org/api to v0.242.0
  • 59ae7e9 chore(deps): update all dependencies
  • e7abd9e chore(deps): update all dependencies
  • 35e7bc1 chore(deps): update all dependencies
  • 2d1ed95 chore(deps): update all dependencies
  • 4a8cb46 Do not allow dashes in file names
  • bcc8afb Update gosec to version 2.22.5 in Github action
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.22.5 to 2.22.7.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@d2d3ae6...32975f4)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: 2.22.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 27, 2025 16:19
@dependabot dependabot bot requested review from szkiba and removed request for a team July 27, 2025 16:19
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 27, 2025
Copy link
Contributor

@szkiba szkiba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@szkiba szkiba merged commit 3994810 into master Jul 28, 2025
25 checks passed
@szkiba szkiba deleted the dependabot/github_actions/securego/gosec-2.22.7 branch July 28, 2025 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant