Skip to content

Bump securego/gosec from 4504603eddc5a91a7b7713932d6d1d3792126103 to 22fd014b7bfcd88c892bfccea1784cade496cdef in the actions group - #97

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/actions-985f868257
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/actions-985f868257

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 1 update: securego/gosec.

Updates securego/gosec from 4504603eddc5a91a7b7713932d6d1d3792126103 to 22fd014b7bfcd88c892bfccea1784cade496cdef

Commits
  • 22fd014 fix(fileperms): check permissions passed to os.Root methods (#1808)
  • ff25931 fix(loader): preserve module identity and loader errors (#1806)
  • fde605d fix(G302): check permissions passed to (*os.File).Chmod (#1807)
  • 359a2c3 fix: load module packages without splitting source files (#1803)
  • 5a3f61b fix(G104): match renamed imports of allowlisted packages (#1805)
  • d39d40b fix(G118): allow context.Background after waiting on ctx.Done() (#1804)
  • b9dd020 fix(deps): update all dependencies (#1802)
  • c935cd7 fix(G112): bind servers set as a field in a struct literal (#1800)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 1 update: [securego/gosec](https://github.com/securego/gosec).


Updates `securego/gosec` from 4504603eddc5a91a7b7713932d6d1d3792126103 to 22fd014b7bfcd88c892bfccea1784cade496cdef
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@4504603...22fd014)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: 22fd014b7bfcd88c892bfccea1784cade496cdef
  dependency-type: direct:production
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Oct 28, 2026
@dependabot
dependabot Bot requested a review from amer8 as a code owner October 28, 2026 06:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant