[PR #178] 🌱 bump securego/gosec from 2.22.10 to 2.22.11 #173

New issue

Open

opened 2026-03-03 16:29:33 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:29:33 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/natrontech/pbs-exporter/pull/178
Author: @dependabot[bot]
Created: 12/15/2025
Status: 🔄 Open

Base: main ← Head: dependabot/github_actions/securego/gosec-2.22.11

📝 Commits (1)

ef7be4d 🌱 bump securego/gosec from 2.22.10 to 2.22.11

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/gosec.yml (+1 -1)

📄 Description

Bumps securego/gosec from 2.22.10 to 2.22.11.

Release notes

Sourced from securego/gosec's releases.

v2.22.11

Changelog

424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f feature: add rule for trojan source (#1431)

aa2e2fb1bdc12e985c9c1b93a15200baf61350d1 feat(ai): add OpenAI and custom API provider support (#1424)

b6eea26df883bbf98351d68bf92fa247a232ac20 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1437)

41f28e209a74be7102c923314ab604db2b1adb62 chore(deps): update module google.golang.org/genai to v1.37.0 (#1435)

daccba6b93d7303569d133a61ecb6dfa289603b6 refactor: simplify report functions in main.go (#1434)

d4be2876cf1b5bf9bcc659bc78d21ce01aea65fc Update go to 1.25.5 and 1.24.11 in CI (#1433)

fde75152394005b98542190c73b8eeea4c10db15 chore(deps): update all dependencies (#1425)

20c9506c1996f71fd0e5a06fd4ecdf487699291a feat(ai): add support for latest Claude models and update provider flags (#1423)

bd9e372f2045f1c90321109bf57bc946ee07f47c Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#1427)

7aa7e938725d3afaeb210f0721e0d84070e052bd chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#1428)

a58917f611bbd062000eac14a5c45434854f61f6 fix: correct schema with temporary placeholder (#1418)

8b0d0b8871e094af2373cf78efecd795a001aaeb perf: skip SSA analysis if no analyzers are loaded (#1419)

8a5d01aca5eb146cd9e04b7f077ef2246dcac037 test: add sarif validation (#1417)

a8fefd17f7f496edd6778796b5ad486d9772e3ff chore(deps): update all dependencies (#1421)

c34cbbf56507211a7bfd749654ba2e76c5851f71 Update go to version 1.25.4 and 1.24.10 in CI (#1415)

10cf58a4a4a7db110cdb8f9a3e892a150239615a fix: build tag parsing. (#1413)

d2d734859ce213cb673795446ac96da4f0de8a17 chore(deps): update all dependencies (#1411)

afa853e9ebabe1410b9b86e3d397e0c138f22041 chore(deps): update all dependencies (#1409)

6b2e6e45a67c8d5e995d849712cd8e895511e495 chore(deps): update all dependencies (#1408)

0adab9d9bee15a7d79feeddb2998961c97dd9c19 Update gosec to version v2.22.10 in the github action (#1405)

Commits

424fc4c feature: add rule for trojan source (#1431)
aa2e2fb feat(ai): add OpenAI and custom API provider support (#1424)
b6eea26 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1437)
41f28e2 chore(deps): update module google.golang.org/genai to v1.37.0 (#1435)
daccba6 refactor: simplify report functions in main.go (#1434)
d4be287 Update go to 1.25.5 and 1.24.11 in CI (#1433)
fde7515 chore(deps): update all dependencies (#1425)
20c9506 feat(ai): add support for latest Claude models and update provider flags (#1423)
bd9e372 Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#1427)
7aa7e93 chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#1428)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/natrontech/pbs-exporter/pull/178 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/15/2025 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/github_actions/securego/gosec-2.22.11` --- ### 📝 Commits (1) - [`ef7be4d`](https://github.com/natrontech/pbs-exporter/commit/ef7be4d011fe0781d23c8391b8ac7c13c1fbcc68) :seedling: bump securego/gosec from 2.22.10 to 2.22.11 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/gosec.yml` (+1 -1) </details> ### 📄 Description Bumps [securego/gosec](https://github.com/securego/gosec) from 2.22.10 to 2.22.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/securego/gosec/releases">securego/gosec's releases</a>.</em></p> <blockquote> <h2>v2.22.11</h2> <h2>Changelog</h2> <ul> <li>424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f feature: add rule for trojan source (<a href="https://redirect.github.com/securego/gosec/issues/1431">#1431</a>)</li> <li>aa2e2fb1bdc12e985c9c1b93a15200baf61350d1 feat(ai): add OpenAI and custom API provider support (<a href="https://redirect.github.com/securego/gosec/issues/1424">#1424</a>)</li> <li>b6eea26df883bbf98351d68bf92fa247a232ac20 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/securego/gosec/issues/1437">#1437</a>)</li> <li>41f28e209a74be7102c923314ab604db2b1adb62 chore(deps): update module google.golang.org/genai to v1.37.0 (<a href="https://redirect.github.com/securego/gosec/issues/1435">#1435</a>)</li> <li>daccba6b93d7303569d133a61ecb6dfa289603b6 refactor: simplify report functions in main.go (<a href="https://redirect.github.com/securego/gosec/issues/1434">#1434</a>)</li> <li>d4be2876cf1b5bf9bcc659bc78d21ce01aea65fc Update go to 1.25.5 and 1.24.11 in CI (<a href="https://redirect.github.com/securego/gosec/issues/1433">#1433</a>)</li> <li>fde75152394005b98542190c73b8eeea4c10db15 chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1425">#1425</a>)</li> <li>20c9506c1996f71fd0e5a06fd4ecdf487699291a feat(ai): add support for latest Claude models and update provider flags (<a href="https://redirect.github.com/securego/gosec/issues/1423">#1423</a>)</li> <li>bd9e372f2045f1c90321109bf57bc946ee07f47c Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (<a href="https://redirect.github.com/securego/gosec/issues/1427">#1427</a>)</li> <li>7aa7e938725d3afaeb210f0721e0d84070e052bd chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (<a href="https://redirect.github.com/securego/gosec/issues/1428">#1428</a>)</li> <li>a58917f611bbd062000eac14a5c45434854f61f6 fix: correct schema with temporary placeholder (<a href="https://redirect.github.com/securego/gosec/issues/1418">#1418</a>)</li> <li>8b0d0b8871e094af2373cf78efecd795a001aaeb perf: skip SSA analysis if no analyzers are loaded (<a href="https://redirect.github.com/securego/gosec/issues/1419">#1419</a>)</li> <li>8a5d01aca5eb146cd9e04b7f077ef2246dcac037 test: add sarif validation (<a href="https://redirect.github.com/securego/gosec/issues/1417">#1417</a>)</li> <li>a8fefd17f7f496edd6778796b5ad486d9772e3ff chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1421">#1421</a>)</li> <li>c34cbbf56507211a7bfd749654ba2e76c5851f71 Update go to version 1.25.4 and 1.24.10 in CI (<a href="https://redirect.github.com/securego/gosec/issues/1415">#1415</a>)</li> <li>10cf58a4a4a7db110cdb8f9a3e892a150239615a fix: build tag parsing. (<a href="https://redirect.github.com/securego/gosec/issues/1413">#1413</a>)</li> <li>d2d734859ce213cb673795446ac96da4f0de8a17 chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1411">#1411</a>)</li> <li>afa853e9ebabe1410b9b86e3d397e0c138f22041 chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1409">#1409</a>)</li> <li>6b2e6e45a67c8d5e995d849712cd8e895511e495 chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1408">#1408</a>)</li> <li>0adab9d9bee15a7d79feeddb2998961c97dd9c19 Update gosec to version v2.22.10 in the github action (<a href="https://redirect.github.com/securego/gosec/issues/1405">#1405</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/securego/gosec/commit/424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f"><code>424fc4c</code></a> feature: add rule for trojan source (<a href="https://redirect.github.com/securego/gosec/issues/1431">#1431</a>)</li> <li><a href="https://github.com/securego/gosec/commit/aa2e2fb1bdc12e985c9c1b93a15200baf61350d1"><code>aa2e2fb</code></a> feat(ai): add OpenAI and custom API provider support (<a href="https://redirect.github.com/securego/gosec/issues/1424">#1424</a>)</li> <li><a href="https://github.com/securego/gosec/commit/b6eea26df883bbf98351d68bf92fa247a232ac20"><code>b6eea26</code></a> chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/securego/gosec/issues/1437">#1437</a>)</li> <li><a href="https://github.com/securego/gosec/commit/41f28e209a74be7102c923314ab604db2b1adb62"><code>41f28e2</code></a> chore(deps): update module google.golang.org/genai to v1.37.0 (<a href="https://redirect.github.com/securego/gosec/issues/1435">#1435</a>)</li> <li><a href="https://github.com/securego/gosec/commit/daccba6b93d7303569d133a61ecb6dfa289603b6"><code>daccba6</code></a> refactor: simplify report functions in main.go (<a href="https://redirect.github.com/securego/gosec/issues/1434">#1434</a>)</li> <li><a href="https://github.com/securego/gosec/commit/d4be2876cf1b5bf9bcc659bc78d21ce01aea65fc"><code>d4be287</code></a> Update go to 1.25.5 and 1.24.11 in CI (<a href="https://redirect.github.com/securego/gosec/issues/1433">#1433</a>)</li> <li><a href="https://github.com/securego/gosec/commit/fde75152394005b98542190c73b8eeea4c10db15"><code>fde7515</code></a> chore(deps): update all dependencies (<a href="https://redirect.github.com/securego/gosec/issues/1425">#1425</a>)</li> <li><a href="https://github.com/securego/gosec/commit/20c9506c1996f71fd0e5a06fd4ecdf487699291a"><code>20c9506</code></a> feat(ai): add support for latest Claude models and update provider flags (<a href="https://redirect.github.com/securego/gosec/issues/1423">#1423</a>)</li> <li><a href="https://github.com/securego/gosec/commit/bd9e372f2045f1c90321109bf57bc946ee07f47c"><code>bd9e372</code></a> Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (<a href="https://redirect.github.com/securego/gosec/issues/1427">#1427</a>)</li> <li><a href="https://github.com/securego/gosec/commit/7aa7e938725d3afaeb210f0721e0d84070e052bd"><code>7aa7e93</code></a> chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (<a href="https://redirect.github.com/securego/gosec/issues/1428">#1428</a>)</li> <li>Additional commits viewable in <a href="https://github.com/securego/gosec/compare/6be2b51fd78feca86af91f5186b7964d76cb1256...424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=securego/gosec&package-manager=github_actions&previous-version=2.22.10&new-version=2.22.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>