build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0#3070
build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0#3070dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![kodiakhq[bot]](https://avatars.githubusercontent.com/in/29196?s=60&v=4){kind=small}
dependabot
Bot
force-pushed
the
dependabot/go_modules/gocloud.dev-0.46.0
branch
from
214ab29 to
40c0363
Compare
|
@dependabot recreate |
dependabot
Bot
force-pushed
the
dependabot/go_modules/gocloud.dev-0.46.0
branch
from
40c0363 to
58405c7
Compare
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.45.0 to 0.46.0. - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.45.0...v0.46.0) --- updated-dependencies: - dependency-name: gocloud.dev dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/gocloud.dev-0.46.0
branch
from
58405c7 to
6f8bdfa
Compare
Kusari Analysis Results:
Both the dependency and code security analyses returned clean results with no critical, high, medium, or low severity findings warranting concern. The dependency analysis reviewed 19 changes (15 updates, 1 addition, 3 removals), all with a risk score of 0, no known vulnerabilities or advisories, and all permissive licenses (Apache-2.0, MIT). Two packages — gocloud.dev and github.com/Azure/go-amqp — were flagged for low scorecard scores related to code review practices and maintenance cadence respectively, but neither has associated vulnerabilities or exploits. gocloud.dev is the primary target of this Dependabot bump and is at its latest version. The code analysis found zero code issues, zero secrets, and no workflow issues across all scanned files (go.mod and go.sum). The combined risk profile remains low and there are no security concerns that warrant delaying this merge. Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
Kusari PR Analysis rerun based on - 6f8bdfa performed at: 2026-06-23T14:32:19Z - link to updated analysis |
|
Kusari PR Analysis rerun based on - 6f8bdfa performed at: 2026-06-23T17:27:38Z - link to updated analysis |
1 participant
Bumps gocloud.dev from 0.45.0 to 0.46.0.
Release notes
Sourced from gocloud.dev's releases.
Commits
60f0d74all: prereleasea1725f0blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager (#3717)7eadd65aws: add AWS IAM Role assumption support (#3716)054c82epostgres/awspostgres: add IAM authentication support (#3713)2b85c85docs: fix Pub/Sub subscribe wording (#3714)b9dee8dbuild: add top-level permissions restriction to tests workflow (#3711)45a8cfcdocstore: support unwrapping ActionListError for use with errors.Is (#3705)78b5976all: support typed errors and errors.Is for error codes (#3708)595f8b6all: update another otel dep (#3701)c903aefall: update otel deps (#3699)