Skip to content

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
openshift-merge-robot merged 2 commits into from
May 16, 2023
Merged

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

openshift-merge-robot merged 2 commits into from
May 16, 2023

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 27, 2023 •
edited
Loading

Bumps github.com/securego/gosec/v2 from 2.14.0 to 2.15.0.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.15.0

Changelog

  • a459eb0 Fix dependencies after renovate update
  • 54f56c7 chore(deps): update all dependencies (#922)
  • df14837 Update to Go 1.20 and fix unit tests (#923)
  • b4270dd Update Go to latest version (#920)
  • a624254 Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
  • 9432e67 Fix github latest URL (#918)
  • e85e1a7 Fix github release url (#916)
  • 7dcb8c7 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
  • c5d217d Update Go version in CI script (#913)
  • 5874e63 Track back when a file path was sanitized with filepath.Clean (#912)
  • fd28036 Fix the TLS config rule when parsing the settings from a variable (#911)
  • a522ae6 Fix build after updating the dependencies (#910)
  • 4cc97ad chore(deps): update all dependencies (#909)
  • 05a7bc5 Fix dependencies after renovate update (#907)
  • 11898d5 chore(deps): update all dependencies (#906)
  • f9a8bf0 Update slack badge and link (#905)
  • dabc7dc Auto-detect TLS MinVersion integer base (#903)
  • c39bcdb Adding s390x support (#902)
  • e06bbf9 chore(deps): update all dependencies (#904)
  • f79c584 chore(deps): update all dependencies (#898)
  • 44f484f Additional types for bad defer check (#897)
  • 2fe6c5b chore(deps): update all dependencies (#894)
  • a0b7ebb chore(deps): update all dependencies (#892)
  • 0acfbb4 Update Go version in CI scripts (#889)
  • 6a964b2 chore(deps): update all dependencies (#888)
  • a7ad827 Allow to override build date with SOURCE_DATE_EPOCH (#887)
  • 26f0389 chore(deps): update all dependencies (#886)
  • 7f91d85 chore(deps): update all dependencies (#884)
  • cf63541 fileperms: bitwise permission comparison (#883)
Commits
  • a459eb0 Fix dependencies after renovate update
  • 54f56c7 chore(deps): update all dependencies (#922)
  • df14837 Update to Go 1.20 and fix unit tests (#923)
  • b4270dd Update Go to latest version (#920)
  • a624254 Update hardcoded_credentials.go fix: adaper equal expr which const value at l...
  • 9432e67 Fix github latest URL (#918)
  • e85e1a7 Fix github release url (#916)
  • 7dcb8c7 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
  • c5d217d Update Go version in CI script (#913)
  • 5874e63 Track back when a file path was sanitized with filepath.Clean (#912)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes. This label is also used on all Dependabot PRs do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. Required by Prow. kind/task Issue is actionable task ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Mar 27, 2023
@dependabot dependabot bot requested a review from a team March 27, 2023 03:00
@openshift-ci
Copy link

openshift-ci bot commented Mar 27, 2023

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot requested review from anandrkskd and feloy March 27, 2023 03:01
@netlify
Copy link

netlify bot commented Mar 27, 2023 •
edited
Loading

✅ Deploy Preview for odo-docusaurus-preview canceled.

Name Link
🔨 Latest commit b7eaaeb
🔍 Latest deploy log https://app.netlify.com/sites/odo-docusaurus-preview/deploys/646340aa98dd6400086c0364

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

OpenShift Unauthenticated Tests on commit 2364411 finished with errors.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

NoCluster Tests on commit 2364411 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

Unit Tests on commit 2364411 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

Validate Tests on commit 2364411 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

Kubernetes Tests on commit 2364411 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

Windows Tests (OCP) on commit 2364411 finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

Kubernetes Docs Tests on commit 67709ff finished successfully.
View logs: TXT HTML

@odo-robot
Copy link

odo-robot bot commented Mar 27, 2023 •
edited
Loading

OpenShift Tests on commit 2364411 finished successfully.
View logs: TXT HTML

@rm3l rm3l added this to the v3.9.0 🚀 milestone Mar 27, 2023
@rm3l rm3l modified the milestones: v3.9.0 🚀, v3.10.0 🚀 Apr 5, 2023
@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. Required by Prow. label Apr 5, 2023
@rm3l
Copy link
Member

rm3l commented Apr 24, 2023

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from a1be6d6 to 2b69701 Compare April 24, 2023 16:09
@openshift-merge-robot openshift-merge-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. Required by Prow. label Apr 24, 2023
@rm3l rm3l modified the milestones: v3.10.0 🚀, v3.11.0 🚀 May 2, 2023
@rm3l
Copy link
Member

rm3l commented May 5, 2023

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from 2b69701 to 79171b3 Compare May 5, 2023 13:25
@dependabot @rm3l
Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0
7173112 
Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.14.0 to 2.15.0.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@v2.14.0...v2.15.0)

---
updated-dependencies:
- dependency-name: github.com/securego/gosec/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@rm3l rm3l force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from 79171b3 to b7eaaeb Compare May 16, 2023 08:36
@sonarqubecloud
Copy link

sonarqubecloud bot commented May 16, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@rm3l rm3l removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. Required by Prow. label May 16, 2023
@rm3l rm3l added this to the v3.11.0 🚀 milestone May 16, 2023
@rm3l rm3l mentioned this pull request May 16, 2023
Closed
@rm3l
Copy link
Member

rm3l commented May 16, 2023

/override kubernetes-infra-stage-test

@openshift-ci
Copy link

openshift-ci bot commented May 16, 2023

@rm3l: Overrode contexts on behalf of rm3l: kubernetes-infra-stage-test

Details

In response to this:

/override kubernetes-infra-stage-test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@rm3l
Copy link
Member

rm3l commented May 16, 2023 

  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment varia  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variab  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variabl  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variable  [Use arrows to move, type to filter]
  > Add new environment variable
  AG?25hGKAGKAGKAGK? What configuration do you want change? Add new environment variable
  GK? Enter new environment variable name: ?25l?25l;999fn
  ======================
  Unexpected error:
      <*xpty.errPassthroughTimeout | 0xc00172e010>: {
          error: <*errors.errorString | 0xc00172e000>{
              s: "passthrough i/o timeout",
          },
      }
      passthrough i/o timeout
  occurred
  In [It] at: /go/odo_1/tests/helper/helper_interactive.go:111 @ 05/16/23 08:45:06.443
------------------------------

Summarizing 1 Failure:
  [FAIL] odo init interactive command tests label unauth personalizing Devfile configuration [It] should allow for personalizing configurations [unauth]
  /go/odo_1/tests/helper/helper_interactive.go:111

Ran 111 of 888 Specs in 148.893 seconds
FAIL! -- 110 Passed | 1 Failed | 0 Pending | 777 Skipped

Issue with interactive init tests - reported and addressed in #6812

/override OpenShift-Unauth-Integration-tests

@openshift-ci
Copy link

openshift-ci bot commented May 16, 2023

@rm3l: /override requires failed status contexts, check run or a prowjob name to operate on.
The following unknown contexts/checkruns were given:

  • OpenShift-Unauth-Integration-tests

Only the following failed contexts/checkruns were expected:

  • Kubernetes-Integration-Tests/Kubernetes-Integration-Tests
  • OpenShift-Integration-tests/OpenShift-Integration-tests
  • OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests
  • Unit-Tests/Unit-Tests
  • ci/prow/odo-ocp4.13-lp-interop-images
  • ci/prow/v4.10-images
  • ci/prow/v4.11-images
  • ci/prow/v4.12-images
  • ci/prow/v4.13-images
  • netlify/odo-docusaurus-preview/deploy-preview
  • pull-ci-redhat-developer-odo-main-odo-ocp4.13-lp-interop-images
  • pull-ci-redhat-developer-odo-main-v4.10-images
  • pull-ci-redhat-developer-odo-main-v4.11-images
  • pull-ci-redhat-developer-odo-main-v4.12-images
  • pull-ci-redhat-developer-odo-main-v4.13-images
  • tide
  • validator/Validate

If you are trying to override a checkrun that has a space in it, you must put a double quote on the context.

Details

In response to this:

 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment varia  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variab  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variabl  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variable  [Use arrows to move, type to filter]
 > Add new environment variable
 AG?25hGKAGKAGKAGK? What configuration do you want change? Add new environment variable
 GK? Enter new environment variable name: ?25l?25l;999fn
 ======================
 Unexpected error:
     <*xpty.errPassthroughTimeout | 0xc00172e010>: {
         error: <*errors.errorString | 0xc00172e000>{
             s: "passthrough i/o timeout",
         },
     }
     passthrough i/o timeout
 occurred
 In [It] at: /go/odo_1/tests/helper/helper_interactive.go:111 @ 05/16/23 08:45:06.443
------------------------------

Summarizing 1 Failure:
 [FAIL] odo init interactive command tests label unauth personalizing Devfile configuration [It] should allow for personalizing configurations [unauth]
 /go/odo_1/tests/helper/helper_interactive.go:111

Ran 111 of 888 Specs in 148.893 seconds
FAIL! -- 110 Passed | 1 Failed | 0 Pending | 777 Skipped

Issue with interactive init tests - reported and addressed in #6812

/override OpenShift-Unauth-Integration-tests

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@rm3l
Copy link
Member

rm3l commented May 16, 2023

/override OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

@openshift-ci
Copy link

openshift-ci bot commented May 16, 2023

@rm3l: Overrode contexts on behalf of rm3l: OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

Details

In response to this:

/override OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. Required by Prow. label May 16, 2023
@openshift-merge-robot openshift-merge-robot merged commit 50cb5c9 into main May 16, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch May 16, 2023 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rm3l rm3l rm3l approved these changes

@anandrkskd anandrkskd Awaiting requested review from anandrkskd

@feloy feloy Awaiting requested review from feloy

Assignees

@rm3l rm3l

Labels

area/dependency Issues or PRs related to dependency changes. This label is also used on all Dependabot PRs kind/task Issue is actionable task lgtm Indicates that a PR is ready to be merged. Required by Prow. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

v3.11.0 🚀

Development

Successfully merging this pull request may close these issues.

2 participants

@rm3l @openshift-merge-robot