Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

dependabot · 2023-03-27T03:00:46Z

Bumps github.com/securego/gosec/v2 from 2.14.0 to 2.15.0.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.15.0

Changelog

a459eb0 Fix dependencies after renovate update

54f56c7 chore(deps): update all dependencies (#922)

df14837 Update to Go 1.20 and fix unit tests (#923)

b4270dd Update Go to latest version (#920)

a624254 Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)

9432e67 Fix github latest URL (#918)

e85e1a7 Fix github release url (#916)

7dcb8c7 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)

c5d217d Update Go version in CI script (#913)

5874e63 Track back when a file path was sanitized with filepath.Clean (#912)

fd28036 Fix the TLS config rule when parsing the settings from a variable (#911)

a522ae6 Fix build after updating the dependencies (#910)

4cc97ad chore(deps): update all dependencies (#909)

05a7bc5 Fix dependencies after renovate update (#907)

11898d5 chore(deps): update all dependencies (#906)

f9a8bf0 Update slack badge and link (#905)

dabc7dc Auto-detect TLS MinVersion integer base (#903)

c39bcdb Adding s390x support (#902)

e06bbf9 chore(deps): update all dependencies (#904)

f79c584 chore(deps): update all dependencies (#898)

44f484f Additional types for bad defer check (#897)

2fe6c5b chore(deps): update all dependencies (#894)

a0b7ebb chore(deps): update all dependencies (#892)

0acfbb4 Update Go version in CI scripts (#889)

6a964b2 chore(deps): update all dependencies (#888)

a7ad827 Allow to override build date with SOURCE_DATE_EPOCH (#887)

26f0389 chore(deps): update all dependencies (#886)

7f91d85 chore(deps): update all dependencies (#884)

cf63541 fileperms: bitwise permission comparison (#883)

Commits

a459eb0 Fix dependencies after renovate update
54f56c7 chore(deps): update all dependencies (#922)
df14837 Update to Go 1.20 and fix unit tests (#923)
b4270dd Update Go to latest version (#920)
a624254 Update hardcoded_credentials.go fix: adaper equal expr which const value at l...
9432e67 Fix github latest URL (#918)
e85e1a7 Fix github release url (#916)
7dcb8c7 chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
c5d217d Update Go version in CI script (#913)
5874e63 Track back when a file path was sanitized with filepath.Clean (#912)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

openshift-ci · 2023-03-27T03:01:01Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

netlify · 2023-03-27T03:02:37Z

✅ Deploy Preview for odo-docusaurus-preview canceled.

Name	Link
🔨 Latest commit	`b7eaaeb`
🔍 Latest deploy log	https://app.netlify.com/sites/odo-docusaurus-preview/deploys/646340aa98dd6400086c0364

odo-robot · 2023-03-27T03:14:01Z

OpenShift Unauthenticated Tests on commit 2364411 finished with errors.
View logs: TXT HTML

odo-robot · 2023-03-27T03:14:31Z

NoCluster Tests on commit 2364411 finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:17:22Z

Unit Tests on commit 2364411 finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:22:00Z

Validate Tests on commit 2364411 finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:48:33Z

Kubernetes Tests on commit 2364411 finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:51:08Z

Windows Tests (OCP) on commit 2364411 finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:58:36Z

Kubernetes Docs Tests on commit 67709ff finished successfully.
View logs: TXT HTML

odo-robot · 2023-03-27T03:59:19Z

OpenShift Tests on commit 2364411 finished successfully.
View logs: TXT HTML

rm3l · 2023-04-24T16:06:06Z

@dependabot recreate

rm3l · 2023-05-05T13:24:22Z

@dependabot recreate

Bumps [github.com/securego/gosec/v2](https://github.com/securego/gosec) from 2.14.0 to 2.15.0. - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](securego/gosec@v2.14.0...v2.15.0) --- updated-dependencies: - dependency-name: github.com/securego/gosec/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

…atements This is considered unsafe by gosec otherwise. [1] securego/gosec#512 [2] securego/gosec#714 [3] https://www.joeshaw.org/dont-defer-close-on-writable-files/

sonarqubecloud · 2023-05-16T08:37:34Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

rm3l · 2023-05-16T13:46:11Z

/override kubernetes-infra-stage-test

openshift-ci · 2023-05-16T13:46:15Z

@rm3l: Overrode contexts on behalf of rm3l: kubernetes-infra-stage-test

In response to this:

/override kubernetes-infra-stage-test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

rm3l · 2023-05-16T13:47:46Z

  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment varia  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variab  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variabl  [Use arrows to move, type to filter]
  > Add new environment variable
  AGGKAGKAGKAGK? What configuration do you want change? Add new environment variable  [Use arrows to move, type to filter]
  > Add new environment variable
  AG?25hGKAGKAGKAGK? What configuration do you want change? Add new environment variable
  GK? Enter new environment variable name: ?25l?25l;999fn
  ======================
  Unexpected error:
      <*xpty.errPassthroughTimeout | 0xc00172e010>: {
          error: <*errors.errorString | 0xc00172e000>{
              s: "passthrough i/o timeout",
          },
      }
      passthrough i/o timeout
  occurred
  In [It] at: /go/odo_1/tests/helper/helper_interactive.go:111 @ 05/16/23 08:45:06.443
------------------------------

Summarizing 1 Failure:
  [FAIL] odo init interactive command tests label unauth personalizing Devfile configuration [It] should allow for personalizing configurations [unauth]
  /go/odo_1/tests/helper/helper_interactive.go:111

Ran 111 of 888 Specs in 148.893 seconds
FAIL! -- 110 Passed | 1 Failed | 0 Pending | 777 Skipped

Issue with interactive init tests - reported and addressed in #6812

/override OpenShift-Unauth-Integration-tests

openshift-ci · 2023-05-16T13:47:50Z

@rm3l: /override requires failed status contexts, check run or a prowjob name to operate on.
The following unknown contexts/checkruns were given:

OpenShift-Unauth-Integration-tests

Only the following failed contexts/checkruns were expected:

Kubernetes-Integration-Tests/Kubernetes-Integration-Tests
OpenShift-Integration-tests/OpenShift-Integration-tests
OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests
Unit-Tests/Unit-Tests
ci/prow/odo-ocp4.13-lp-interop-images
ci/prow/v4.10-images
ci/prow/v4.11-images
ci/prow/v4.12-images
ci/prow/v4.13-images
netlify/odo-docusaurus-preview/deploy-preview
pull-ci-redhat-developer-odo-main-odo-ocp4.13-lp-interop-images
pull-ci-redhat-developer-odo-main-v4.10-images
pull-ci-redhat-developer-odo-main-v4.11-images
pull-ci-redhat-developer-odo-main-v4.12-images
pull-ci-redhat-developer-odo-main-v4.13-images
tide
validator/Validate

If you are trying to override a checkrun that has a space in it, you must put a double quote on the context.

In response to this:

 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment varia  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variab  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variabl  [Use arrows to move, type to filter]
 > Add new environment variable
 AGGKAGKAGKAGK? What configuration do you want change? Add new environment variable  [Use arrows to move, type to filter]
 > Add new environment variable
 AG?25hGKAGKAGKAGK? What configuration do you want change? Add new environment variable
 GK? Enter new environment variable name: ?25l?25l;999fn
 ======================
 Unexpected error:
     <*xpty.errPassthroughTimeout | 0xc00172e010>: {
         error: <*errors.errorString | 0xc00172e000>{
             s: "passthrough i/o timeout",
         },
     }
     passthrough i/o timeout
 occurred
 In [It] at: /go/odo_1/tests/helper/helper_interactive.go:111 @ 05/16/23 08:45:06.443
------------------------------

Summarizing 1 Failure:
 [FAIL] odo init interactive command tests label unauth personalizing Devfile configuration [It] should allow for personalizing configurations [unauth]
 /go/odo_1/tests/helper/helper_interactive.go:111

Ran 111 of 888 Specs in 148.893 seconds
FAIL! -- 110 Passed | 1 Failed | 0 Pending | 777 Skipped

Issue with interactive init tests - reported and addressed in #6812

/override OpenShift-Unauth-Integration-tests

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

rm3l · 2023-05-16T13:48:17Z

/override OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

openshift-ci · 2023-05-16T13:48:21Z

@rm3l: Overrode contexts on behalf of rm3l: OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

In response to this:

/override OpenShift-Integration-tests/OpenShift-Unauth-Integration-tests

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

dependabot bot requested a review from a team March 27, 2023 03:00

openshift-ci bot requested review from anandrkskd and feloy March 27, 2023 03:01

rm3l added this to the v3.9.0 🚀 milestone Mar 27, 2023

rm3l modified the milestones: v3.9.0 🚀, v3.10.0 🚀 Apr 5, 2023

openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. Required by Prow. label Apr 5, 2023

dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from a1be6d6 to 2b69701 Compare April 24, 2023 16:09

openshift-merge-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. Required by Prow. label Apr 24, 2023

rm3l modified the milestones: v3.10.0 🚀, v3.11.0 🚀 May 2, 2023

dependabot bot force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from 2b69701 to 79171b3 Compare May 5, 2023 13:25

Make sure to handle error returned by io.Closer.Close() in 'defer' st…

b7eaaeb

…atements This is considered unsafe by gosec otherwise. [1] securego/gosec#512 [2] securego/gosec#714 [3] https://www.joeshaw.org/dont-defer-close-on-writable-files/

rm3l force-pushed the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch from 79171b3 to b7eaaeb Compare May 16, 2023 08:36

rm3l removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. Required by Prow. label May 16, 2023

rm3l added this to the v3.11.0 🚀 milestone May 16, 2023

rm3l mentioned this pull request May 16, 2023

Nightly tests failing #6812

Closed

rm3l approved these changes May 16, 2023

View reviewed changes

openshift-ci bot assigned rm3l May 16, 2023

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. Required by Prow. label May 16, 2023

openshift-merge-robot merged commit 50cb5c9 into main May 16, 2023

dependabot bot deleted the dependabot/go_modules/github.com/securego/gosec/v2-2.15.0 branch May 16, 2023 13:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

dependabot bot commented on behalf of github Mar 27, 2023 •

edited

Loading

openshift-ci bot commented Mar 27, 2023

netlify bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

rm3l commented Apr 24, 2023

rm3l commented May 5, 2023

sonarqubecloud bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

Go: Bump github.com/securego/gosec/v2 from 2.14.0 to 2.15.0 #6686

Conversation

dependabot bot commented on behalf of github Mar 27, 2023 • edited Loading

v2.15.0

Changelog

openshift-ci bot commented Mar 27, 2023

netlify bot commented Mar 27, 2023 • edited Loading

✅ Deploy Preview for odo-docusaurus-preview canceled.

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

odo-robot bot commented Mar 27, 2023 • edited Loading

rm3l commented Apr 24, 2023

rm3l commented May 5, 2023

sonarqubecloud bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

rm3l commented May 16, 2023

openshift-ci bot commented May 16, 2023

dependabot bot commented on behalf of github Mar 27, 2023 •

edited

Loading

netlify bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading

odo-robot bot commented Mar 27, 2023 •

edited

Loading