Skip to content

fix(deps): update osv-scanner minor#2365

Merged
G-Rath merged 1 commit intogoogle:mainfrom
renovate-bot:renovate/osv-scanner-minor
Dec 4, 2025
Merged

fix(deps): update osv-scanner minor#2365
G-Rath merged 1 commit intogoogle:mainfrom
renovate-bot:renovate/osv-scanner-minor

Conversation

@renovate-bot
Copy link
Collaborator

@renovate-bot renovate-bot commented Nov 23, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
deps.dev/api/v3 v3.0.0-20251104021112-20ad94767ddf -> v3.0.0-20251127011616-f763ce91ff53 age confidence require patch
deps.dev/api/v3alpha (changelog) 20ad947 -> f763ce9 age confidence require digest
deps.dev/util/maven (changelog) 20ad947 -> f763ce9 age confidence require digest
deps.dev/util/resolve (changelog) 20ad947 -> f763ce9 age confidence require digest
deps.dev/util/semver (changelog) 20ad947 -> f763ce9 age confidence require digest
github.com/gkampitakis/go-snaps v0.5.15 -> v0.5.18 age confidence require patch
github.com/go-git/go-git/v5 v5.16.3 -> v5.16.4 age confidence require patch
github.com/goccy/go-yaml v1.18.0 -> v1.19.0 age confidence require minor
github.com/ianlancetaylor/demangle (changelog) 68c556c -> 96ee002 age confidence require digest
github.com/ossf/osv-schema/bindings/go (changelog) 9fb6c88 -> 6780af8 age confidence require digest
google.golang.org/grpc v1.76.0 -> v1.77.0 age confidence require minor
osv.dev/bindings/go (changelog) 43ef4fb -> 4c7f04b age confidence require digest

Release Notes

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.18

Compare Source

v0.5.17

Compare Source

v0.5.16

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.4

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

goccy/go-yaml (github.com/goccy/go-yaml)

v1.19.0: 1.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: goccy/go-yaml@v1.18.0...v1.19.0

grpc/grpc-go (google.golang.org/grpc)

v1.77.0: Release 1.77.0

Compare Source

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#​8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#​8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#​8605)
  • client: Ignore HTTP status header for gRPC streams. (#​8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#​8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#​8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#​8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#​8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#​8610)
  • mem: Clear large buffers before re-using. (#​8670)

Performance Improvements

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#​8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#​8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#​8536)
  • experimental/stats: Add support for up/down counters. (#​8581)

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Nov 23, 2025
@forking-renovate
Copy link

forking-renovate bot commented Nov 23, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/compute/metadata v0.8.4 -> v0.9.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/otel v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.38.0
golang.org/x/oauth2 v0.30.0 -> v0.32.0
google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba -> v0.0.0-20251124214823-79d6a2a48846
google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251111163417-95abcf5c77ba

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 4 times, most recently from e15d359 to 6016a2e Compare November 24, 2025 23:00
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 2 times, most recently from dc171c2 to 4665092 Compare November 25, 2025 01:32
@cuixq
Copy link
Contributor

cuixq commented Nov 25, 2025

it seems https://github.com/jedib0t/go-pretty/releases/tag/v6.7.4 brings in the style change

@cuixq cuixq mentioned this pull request Nov 25, 2025
Merged
cuixq added a commit that referenced this pull request Nov 25, 2025
@cuixq
chore: update github.com/jedib0t/go-pretty/v6 to v6.7.5 (#2371)
6939b2a 
Unblocks #2365

https://github.com/jedib0t/go-pretty/releases/tag/v6.7.4 introduces
minor changes in the table rendering result. Snapshots are updated to
reflect the changes. They are only different in styles and this should
not impact GitHub annotation output.
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch from 4665092 to 3795ad5 Compare November 25, 2025 06:08
@codecov-commenter
Copy link

codecov-commenter commented Nov 25, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.80%. Comparing base (c3dec5b) to head (276b568).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #2365      +/-   ##
==========================================
+ Coverage   67.78%   67.80%   +0.01%     
==========================================
  Files         172      172              
  Lines       13278    13278              
==========================================
+ Hits         9001     9003       +2     
+ Misses       3569     3567       -2     
  Partials      708      708

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@G-Rath
Copy link
Collaborator

G-Rath commented Nov 25, 2025

The remaining CI failure is related to the go-snaps update, which I'm also getting on osv-detector - I'll dig into it

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 6 times, most recently from e9107ac to d622e38 Compare November 26, 2025 22:51
@G-Rath G-Rath mentioned this pull request Nov 27, 2025
Closed
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 8 times, most recently from 86a7aaf to d824162 Compare November 29, 2025 04:39
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 7 times, most recently from 957e035 to f228327 Compare December 2, 2025 22:25
@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch 3 times, most recently from 72e8829 to a2ff036 Compare December 3, 2025 18:50
@G-Rath
Copy link
Collaborator

G-Rath commented Dec 3, 2025

I'll revisit this after #2387 is landed

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch from a2ff036 to 52df197 Compare December 3, 2025 22:26
@G-Rath G-Rath enabled auto-merge (squash) December 4, 2025 02:21
auto-merge was automatically disabled December 4, 2025 02:23

Head branch was pushed to by a user without write access

@renovate-bot renovate-bot force-pushed the renovate/osv-scanner-minor branch from 52df197 to 276b568 Compare December 4, 2025 02:23
@G-Rath G-Rath merged commit d9c47c9 into google:main Dec 4, 2025
17 checks passed
@renovate-bot renovate-bot deleted the renovate/osv-scanner-minor branch December 4, 2025 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cuixq cuixq cuixq approved these changes

@another-rex another-rex another-rex approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@renovate-bot @cuixq @codecov-commenter @G-Rath @another-rex