Skip to content

Refactor go package updater#1063

Open
eranturgeman wants to merge 8 commits intojfrog:v3_erfrom
eranturgeman:refactor-go-package-updater
Open

Refactor go package updater#1063
eranturgeman wants to merge 8 commits intojfrog:v3_erfrom
eranturgeman:refactor-go-package-updater

Conversation

@eranturgeman
Copy link
Collaborator

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies

This PR refactors Golang package updater:

  1. detects all manifests to be fixed
  2. fix each vulnerable dependency occurrence in all identified locations (and rollback to valid state if fails)
  3. tidy go.sum and vendor if necessary (if exists in remote)

@eranturgeman eranturgeman requested a review from orto17 February 16, 2026 11:42
@eranturgeman eranturgeman added safe to test Approve running integration tests on a pull request improvement Automatically generated release notes labels Feb 16, 2026
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Feb 16, 2026
@eranturgeman eranturgeman added the safe to test Approve running integration tests on a pull request label Feb 16, 2026
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Feb 16, 2026
@github-actions
Copy link
Contributor

👍 Frogbot scanned this pull request and did not find any new security issues.


scanDetails: scanDetails,
fixSupported: true,
descriptorsToCheck: []string{GoPackageDescriptor},
vulnDetails: createVulnerabilityDetails(techutils.Go, "golang.org/x/crypto", "", "0.0.0-20201216223049-8b5274cf687f", false, "go.mod"),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dont we want to move all the go tests to gopackagehandler_test ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants