Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 24, 2021

Bumps github.com/securego/gosec/v2 from 2.5.0 to 2.9.3.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.9.3

Changelog

6a41fb9 Fix securego/gosec#714 (#733) c95e9c2 chore(deps): update all dependencies (#731)

v2.9.2

Changelog

e57efa8 Fix a panic in suproc rule when the declaration of the variable is not available in the AST (#728) ff17c30 Use go embed for templates (#725) 3eba7b8 add openssh to docker image (#719) 55c6cea Fix crash when parsing the TLS min version value (#724) 40fa36d G303: catch with os.WriteFile, add os.Create test case (#718) 873ac24 chore(deps): update all dependencies (#722) f1f0056 Spelling fixes (#717) 0680c75 chore(deps): update all dependencies (#716) 79c8b79 use a better naming for the variable (#715)

v2.9.1

Changelog

6921395 Fix the SBOM generation step in the release action (#712) 5a3a27a Phase out support for go version 1.15 because current ginko is not backward compatible (#710)

v2.8.1

Changelog

3f800cc Fix the unit tests (#652) df10b65 Fix gosimple lint warning (#651) 731d0d5 Results must always be present in the SARIF report (#650) 3c230ac errors.go: add Hash.Write() to the white list. (#648) e72b1e5 Use of vars instead of func c81cff0 Update all dependencies (#646) 3ff0a2c Fixes #644 (#645) e3dffd6 Update renovate configuration aa35eb5 Delete renovate.json (#642) 3b1b77e add onboarding (#640) 03360ba Update renovate configuration 8a8dbec Tidy up the dependencies (#637) 3a4d09b Update all dependencies (#635) 6cde6b3 Disable cache in golangci job (#636) 1256f16 Fix lint and fail on error in the ci build dbb9811 Add crypto and lint to the tools modules 244adc6 Update the github ci action to use cache and matrix strategy df1249d Update install.sh with more installation options af27673 Update README.md

v2.8.0

Changelog

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.5.0 to 2.9.3.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.5.0...v2.9.3)

---
updated-dependencies:
- dependency-name: github.com/securego/gosec/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 9, 2021

Superseded by #72.

@dependabot dependabot bot closed this Dec 9, 2021
@dependabot dependabot bot deleted the dependabot/go_modules/internal/tools/github.com/securego/gosec/v2-2.9.3 branch December 9, 2021 20:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant