Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 11, 2025

Bumps github.com/securego/gosec/v2 from 2.22.11-0.20251204091113-daccba6b93d7 to 2.22.11.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.22.11

Changelog

  • 424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f feature: add rule for trojan source (#1431)
  • aa2e2fb1bdc12e985c9c1b93a15200baf61350d1 feat(ai): add OpenAI and custom API provider support (#1424)
  • b6eea26df883bbf98351d68bf92fa247a232ac20 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1437)
  • 41f28e209a74be7102c923314ab604db2b1adb62 chore(deps): update module google.golang.org/genai to v1.37.0 (#1435)
  • daccba6b93d7303569d133a61ecb6dfa289603b6 refactor: simplify report functions in main.go (#1434)
  • d4be2876cf1b5bf9bcc659bc78d21ce01aea65fc Update go to 1.25.5 and 1.24.11 in CI (#1433)
  • fde75152394005b98542190c73b8eeea4c10db15 chore(deps): update all dependencies (#1425)
  • 20c9506c1996f71fd0e5a06fd4ecdf487699291a feat(ai): add support for latest Claude models and update provider flags (#1423)
  • bd9e372f2045f1c90321109bf57bc946ee07f47c Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#1427)
  • 7aa7e938725d3afaeb210f0721e0d84070e052bd chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#1428)
  • a58917f611bbd062000eac14a5c45434854f61f6 fix: correct schema with temporary placeholder (#1418)
  • 8b0d0b8871e094af2373cf78efecd795a001aaeb perf: skip SSA analysis if no analyzers are loaded (#1419)
  • 8a5d01aca5eb146cd9e04b7f077ef2246dcac037 test: add sarif validation (#1417)
  • a8fefd17f7f496edd6778796b5ad486d9772e3ff chore(deps): update all dependencies (#1421)
  • c34cbbf56507211a7bfd749654ba2e76c5851f71 Update go to version 1.25.4 and 1.24.10 in CI (#1415)
  • 10cf58a4a4a7db110cdb8f9a3e892a150239615a fix: build tag parsing. (#1413)
  • d2d734859ce213cb673795446ac96da4f0de8a17 chore(deps): update all dependencies (#1411)
  • afa853e9ebabe1410b9b86e3d397e0c138f22041 chore(deps): update all dependencies (#1409)
  • 6b2e6e45a67c8d5e995d849712cd8e895511e495 chore(deps): update all dependencies (#1408)
  • 0adab9d9bee15a7d79feeddb2998961c97dd9c19 Update gosec to version v2.22.10 in the github action (#1405)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.22.11-0.20251204091113-daccba6b93d7 to 2.22.11.
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](https://github.com/securego/gosec/commits/v2.22.11)

---
updated-dependencies:
- dependency-name: github.com/securego/gosec/v2
  dependency-version: 2.22.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Relates to an upstream dependency go Pull requests that update Go code labels Dec 11, 2025
@ldez ldez added the linter: update version Update version of linter label Dec 11, 2025
@ldez ldez added this to the unreleased milestone Dec 11, 2025
@ldez ldez self-requested a review December 11, 2025 12:48
@ldez ldez added the blocked: until next minor Will be a part of the next minor release label Dec 11, 2025
@ldez
Copy link
Member

ldez commented Dec 11, 2025

Note: despite the path version v2.22.11, this update contains a new rule.

@ldez ldez removed the blocked: until next minor Will be a part of the next minor release label Dec 11, 2025
@ldez ldez merged commit 3eae3e9 into main Dec 11, 2025
18 checks passed
@ldez ldez deleted the dependabot/go_modules/github.com/securego/gosec/v2-2.22.11 branch December 11, 2025 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Relates to an upstream dependency go Pull requests that update Go code linter: update version Update version of linter

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants