Repository navigation
chore(deps): update securego/gosec action to v2.30.0 - #1966
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.29.0→v2.30.0Release Notes
securego/gosec
v2.30.0Compare Source
Changelog
5eb1d10fix(g602): recognize equality comparison in minimumLenForBranch (#1796)cc750ddfix(G112): honor read timeouts assigned through a struct field (#1798)1cbfd7efix(G112): report read timeouts explicitly set to zero (#1797)05b9c4cfeat(G706): extend log/slog method coverage (#1795)17ad2ddfix(autofix): read the first text block of a Claude response (#1794)b23171cfix(autofix): give every AI request its own timeout (#1793)20b9e5bfix(resolve): treat constants from other packages as resolved (#1792)86d3c26fix(autofix): return an error when a Gemini candidate has no content (#1791)14ef84fUpdate to go version 1.27.3 and 1.26.10 (#1790)7cbd7a9fix(autofix): default Gemini model to gemini-3.1-pro-preview (#1788)1e26bcefix(G102): resolve concatenated and constant listen addresses (#1787)836dbdbfix: default -concurrency to GOMAXPROCS so container CPU limits apply (#1786)bbd69e2fix(g602): track statically known lengths for append results in slice bounds check (#1773)30e2d38feat(rules): add G125 to detect unescaped url.JoinPath elements (#1777)57c45b8fix: load absolute file paths so nested modules are analysed from the parent directory (#1779)77fa84efix(G118): treat a cancel sent on a channel as handed off (#1782)ca547abfix(G112): honor read timeouts assigned after the http.Server literal (#1781)024084bfix(G303): resolve constant temp file paths (#1784)782eeb1fix(deps): update all dependencies (#1783)707f227fix(G203): treat constant template arguments as safe (#1770)8c5daa6fix(G402): check TLS settings assigned through a *tls.Config (#1769)7157726fix(deps): update all dependencies (#1775)7b1b5ceUpdate to go version 1.27.2 and 1.26.9 (#1772)d2b649eKeep SARIF driver rules sorted and resolve rule indexes at the end (#1767)1f52e64fix(G602): track append() results for slice bounds checking (#1754)ea75d9ffix(deps): update all dependencies (#1768)65c2c08fix(G602): trust len(nilSlice) == N guards, matching make()-backed slices (#1752)6ff893efix(G407): treat an array IV/nonce as a zeroed buffer (#1763)aaca894fix(fileperms): resolve constant file and directory permissions (#1766)826f6f4fix(G102): detect binding to the IPv6 unspecified address (#1760)021cc2efix(G407): stop the nonce source walk on cycles (#1761)ccb369dfix(G407): do not count AEAD.Seal as the read that fills its own nonce (#1762)9b31806fix(deps): update all dependencies (#1764)8c77519fix(G602): validate inequality len guards (#1757)027baa2fix(G121): track request captured by closures (#1759)9ede89efix(deps): update all dependencies (#1756)29a042efix: make nosec suppression independent of comment order (#1741)6813471fix(G403): resolve constant RSA key sizes (#1751)201d413fix(G602): validate subslice bounds under equality guards (#1749)accb424fix(G124): resolve negated constant cookie flags (#1748)61fa1dafix(G602): report constant index equal to the length asserted by an equality guard (#1746)78fbcc7Skip taint call graphs when no sinks match (#1745)79b4fcdFix brittle test for html writer (#1744)d70cac3fix(G404): ignore non-cryptographic Shuffle calls (#1742)9e8e5d9fix(deps): update all dependencies (#1743)8075fd2fix(taint): remove Result.Source field that is never populated (#1739)58362d8Update all dependencies (#1737)d98945aUpdate go version 1.27.1 and 1.26.8 and phased out 1.25 (#1738)720c679fix(report): correct Babel SRI hash (#1736)598d614fix(taint): make wide caller traversal deterministic (#1733)4d447d9fix(G702): skip the context argument of exec.CommandContext (#1730)be1e315feat(taint): name the sink in taint finding messages (#1731)a102130Update all dependencies (#1734)57f1613Update action to gosec version 2.29.0 (#1728)Configuration
📅 Schedule: (in timezone America/New_York)
* 0-7 * * 1-5)* 18-23 * * 1-5)* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.