Skip to content

build(deps): bump securego/gosec from 2eb4727ebc7504944ddbcdd2f7157db492026c3f to deb54465fea23d19a77f037e11e6589021f8501d - #196

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/securego/gosec-deb54465fea23d19a77f037e11e6589021f8501d
Closed

build(deps): bump securego/gosec from 2eb4727ebc7504944ddbcdd2f7157db492026c3f to deb54465fea23d19a77f037e11e6589021f8501d#196
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/securego/gosec-deb54465fea23d19a77f037e11e6589021f8501d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps securego/gosec from 2eb4727ebc7504944ddbcdd2f7157db492026c3f to deb54465fea23d19a77f037e11e6589021f8501d.

Commits
  • deb5446 analyzers/G703: stop treating Clean/Abs/PathEscape as path-traversal sanitize...
  • 2e13f16 fix(junit): properly escape XML in failure text (#1718)
  • 3833037 fix(csv): capture and report write errors on flush (#1716)
  • f6d07d7 fix(report): root path matching in formatters (#1719)
  • 17d3916 fix(config): handle nosec tags with leading hash (#1717)
  • 3958f0e Update all dependencies (#1720)
  • 9c38a86 Add support for go version 1.27.0 and update to version 1.25.14 and 1… (#1726)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2eb4727ebc7504944ddbcdd2f7157db492026c3f to deb54465fea23d19a77f037e11e6589021f8501d.
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@2eb4727...deb5446)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-version: deb54465fea23d19a77f037e11e6589021f8501d
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 25, 2026
@github-actions

Copy link
Copy Markdown

Code Metrics Report

main (ad850d4) #196 (23f0761) +/-
Coverage 96.3% 96.5% +0.2%
Test Execution Time 7s 20s +13s
Details
  |                     | main (ad850d4) | #196 (23f0761) |  +/-  |
  |---------------------|----------------|----------------|-------|
+ | Coverage            |          96.3% |          96.5% | +0.2% |
  |   Files             |             89 |             89 |     0 |
  |   Lines             |           3644 |           3886 |  +242 |
+ |   Covered           |           3510 |           3752 |  +242 |
- | Test Execution Time |             7s |            20s |  +13s |

Code coverage of files in pull request scope (95.6% → 95.9%)

Files Coverage +/- Status
index.go 94.6% +0.4% affected
internal/buildertest/buildertest.go 88.3% +9.2% affected
internal/golden/golden.go 96.7% +0.6% affected
markdown.go 97.9% +0.4% affected
mermaid/arch/architecture.go 89.4% +1.2% affected
mermaid/block/block_diagram.go 94.0% +0.1% affected
mermaid/c4/c4.go 97.2% +0.1% affected
mermaid/class/class_diagram.go 98.1% +0.0% affected
mermaid/er/entity_relationship.go 93.9% +1.3% affected
mermaid/flowchart/flowchart.go 96.8% +0.4% affected
mermaid/gantt/gantt_chart.go 98.5% +0.0% affected
mermaid/gitgraph/git_graph.go 94.9% +0.1% affected
mermaid/kanban/kanban.go 96.9% +0.0% affected
mermaid/mindmap/mindmap.go 93.3% +0.3% affected
mermaid/packet/packet.go 97.6% +0.1% affected
mermaid/piechart/pie_chart.go 97.0% +0.6% affected
mermaid/quadrant/quadrant_chart.go 98.6% +0.0% affected
mermaid/radar/radar.go 98.8% +0.0% affected
mermaid/requirement/requirement_diagram.go 94.2% +0.0% affected
mermaid/sequence/sequence.go 97.2% +0.1% affected
mermaid/state/state_diagram.go 97.6% +0.1% affected
mermaid/treemap/treemap.go 98.6% +0.0% affected
mermaid/userjourney/user_journey.go 96.5% +0.1% affected
mermaid/venn/venn.go 97.3% +0.3% affected
mermaid/wardley/wardley.go 92.6% +0.8% affected
mermaid/xychart/xy_chart.go 95.8% +0.3% affected

Reported by octocov

@nao1215

nao1215 commented Aug 29, 2026

Copy link
Copy Markdown
Owner

Included in #197.

@nao1215 nao1215 closed this Aug 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/securego/gosec-deb54465fea23d19a77f037e11e6589021f8501d branch August 29, 2026 20:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant