Bump github.com/onsi/gomega from 1.22.1 to 1.27.10 #69
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.22.1 to 1.27.10. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.22.1...v1.27.10) --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
| GitGuardian id | Secret | Commit | Filename | |
|---|---|---|---|---|
| 1877863 | Generic Password | 0d10c3b | vendor/golang.org/x/tools/internal/gocommand/invoke.go | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secret safely. Learn here the best practices.
- Revoke and rotate this secret.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
Our GitHub checks need improvements? Share your feedbacks!
|
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
|
@dependabot rebase |
|
Looks like github.com/onsi/gomega is up-to-date now, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/go_modules/github.com/onsi/gomega-1.27.10
branch
Bumps github.com/onsi/gomega from 1.22.1 to 1.27.10.
Release notes
Sourced from github.com/onsi/gomega's releases.
... (truncated)
Changelog
Sourced from github.com/onsi/gomega's changelog.
... (truncated)
Commits
9cbf7b0v1.27.10bdc7803fix: go 1.21 adding goroutine ID to creator+location (#685)66bcd9dv1.27.93b31fc3Prevent nil-dereference in format.Object for boxed nil error (#681)360849bBump golang.org/x/net from 0.11.0 to 0.12.0 (#679)86f3659chore: use String() instead of fmt.Sprintf (#678)642ead0Bump golang.org/x/net from 0.10.0 to 0.11.0 (#674)ceb9ca6chore: unnecessary use of fmt.Sprintf (#677)a2087d8Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (#675)fc9a89fdocs: fix ContainSubstring references (#673)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @paasbot.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)