Skip to content

build(deps): bump securego/gosec from 2.25.0 to 2.27.1#532

Merged
stenya merged 1 commit into
developmentfrom
dependabot/github_actions/securego/gosec-2.27.1
Jun 4, 2026
Merged

build(deps): bump securego/gosec from 2.25.0 to 2.27.1#532
stenya merged 1 commit into
developmentfrom
dependabot/github_actions/securego/gosec-2.27.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Bumps securego/gosec from 2.25.0 to 2.27.1.

Release notes

Sourced from securego/gosec's releases.

v2.27.1

Changelog

  • 9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889 Downgrade google lib to avoid min Go version bump (#1687)

v2.27.0

Changelog

  • 0a5c6504c46569257663726ac54c7cfdad42e846 Downgrade the jsonschema dep to v0.13.0 due to incompatibility with anthropick-sdk-go (#1686)
  • b48e668764ca9fd826a7b84c9e9194af3227fade Update all dependencies (#1685)
  • bd17b2589eb634e511b352f14fc30cb40863eefe Downgrade the github.com/invopop/jsonschema v0.13.0 to solve incopatibility with anthropic-sdk (#1683)
  • c6f8c3d9a75d897612c7beb55007ac5f29b2e3a2 Update all dependencies (#1682)
  • 5676cbccda635b33fab15bb85e32b2e741c9372f Update vulnerabilities alerts for indirect dependencies
  • ce167d4a37bc5fe3f49bb9be3209f9759b69ff6f Pin dependencies (#1681)
  • 74b726dfcebf218a1984a51b44fe962aecef5921 Skip pining for my repos
  • a68f8825bfa51b46cc517a5cd8baf4848e03a8d1 Update renovate configuration
  • 2f8791bad7bf8f6a11f0b29e41aec54ddb9fcb0b Fix typo
  • ad3778a7be907bf4e5cf5ed5c63333a377f3fb3b Update branch config in renovate config
  • b1583fe2f3ffb41074cb11996e58ca554c6c04e7 Migrate config renovate.json (#1678)
  • 139e33d474374c8e26a0e480f077526e131f43bb Update renovate to refresh the branch creation
  • f3c03ebb7f077f9b9ddfc64f710e0a2d2e92ded4 Update the renovate branch prefix
  • 85814f2e3964a6d38aeb6e6002ac9268c16fcab5 Update renovate config to pin the actions dependencies by digests (#1676)
  • 55f051973281b15900b2b8b30aaf467a7b9127ea Migrate the html remport to react v19. (#1675)
  • 6ad4476d269895a4a9b77883b3e3503f7e5e4103 Manually update version to fix renovate (#1674)
  • 8f88312a5f80dbf04d2248d75c372d165e54e589 feat: integrate Atlas Cloud provider (#1672)
  • 6351b0c6fcc7d75acb230a9be7f9047aada322ae Refactor error position parsing to support path with colon. (#1673)
  • de65614d10a6b84029e3e1215567b8ce7e490f23 Add two options to require rule ID and justificaiton for inline annotations (#1671)
  • e354c572d957eb8bf63481cc9ba2704b58a6ae35 Fix false positive in G118 when cancel is stored in a slice/map (#1670)
  • 4161f0b4333859990584c9fb3fd377a892eaf477 chore(go): update supported Go versions to 1.25.10 and 1.26.3 (#1669)
  • b4f29347566880540afec8205b633d2859377cec Harden the github workflows and action (#1665)
  • b7aca268861108d4446959fa92d2fe808eb7aa6f Fix justification delimiter in annotation format doc (#1661)
  • 945bce72d26a794e25a122d87527d063bf887903 Update all dependencies (#1664)
  • 5f4eec95fa28ce5dc6cf555de8c242cb57545f01 Update action to use gosec version v2.26.1 (#1660)

v2.26.1

Changelog

  • 4a3bd8af174872c778439083ded7adbf3747e770 Update cosign to v3.0.6 (#1659)
Commits
  • 9e6a984 Downgrade google lib to avoid min Go version bump (#1687)
  • 0a5c650 Downgrade the jsonschema dep to v0.13.0 due to incompatibility with anthropic...
  • b48e668 Update all dependencies (#1685)
  • bd17b25 Downgrade the github.com/invopop/jsonschema v0.13.0 to solve incopatibility w...
  • c6f8c3d Update all dependencies (#1682)
  • 5676cbc Update vulnerabilities alerts for indirect dependencies
  • ce167d4 Pin dependencies (#1681)
  • 74b726d Skip pining for my repos
  • a68f882 Update renovate configuration
  • 2f8791b Fix typo
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.25.0 to 2.27.1.
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@223e19b...9e6a984)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: 2.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 3, 2026
@stenya stenya merged commit 9bf0583 into development Jun 4, 2026
8 checks passed
@stenya stenya deleted the dependabot/github_actions/securego/gosec-2.27.1 branch June 4, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant