Skip to content

Conversation

@renovate-sh-app
Copy link

@renovate-sh-app renovate-sh-app bot commented Oct 23, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/dave/dst v0.27.2 -> v0.27.3 age confidence

Release Notes

dave/dst (github.com/dave/dst)

v0.27.3

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

| datasource | package             | from    | to      |
| ---------- | ------------------- | ------- | ------- |
| go         | github.com/dave/dst | v0.27.2 | v0.27.3 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@github-actions
Copy link

😢 zizmor failed with exit code 14.

Expand for full output
error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/release.yml:19:9
   |
19 |       - uses: goreleaser/goreleaser-action@v4
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:16:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v[0-9]+.[0-9]+.[0-9]+'
   | |_______________________________- generally used when publishing artifacts generated at runtime
...
16 |         - uses: actions/setup-go@v4
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^ cache enabled by default here
   |
   = note: audit confidence → Low
   = note: this finding has an auto-fix

10 findings (4 ignored, 4 suppressed, 1 fixable): 0 informational, 0 low, 0 medium, 2 high

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants