Skip to content

chore(deps): bump osv-scanner to v2.3.8 and update indirect dependencies #592

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tolzhabayev wants to merge 3 commits into
base: main
Choose a base branch
from
Open

chore(deps): bump osv-scanner to v2.3.8 and update indirect dependencies #592

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
9345865
chore(deps): bump osv-scanner to v2.3.3 and golangci-lint to v2.12.2
tolzhabayev May 22, 2026
16cb369
fix(docker): pin golangci-lint install.sh to release tag
tolzhabayev May 22, 2026
f30eb8b
chore(docker): bump golang base image to provide go 1.25.7+
tolzhabayev May 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
ARG GOLANGCI_LINT_VERSION=v2.5.0
ARG GOLANGCI_LINT_VERSION=v2.12.2
ARG GOSEC_VERSION=v2.22.8
ARG SEMGREP_VERSION=1.84.1

FROM golang:1.25-alpine3.22@sha256:fa3380ab0d73b706e6b07d2a306a4dc68f20bfc1437a6a6c47c8f88fe4af6f75 AS builder
FROM golang:1.25-alpine3.22@sha256:26b4d7113039cd51356bd7930ecafd1031d2975dc3b6940ec8ed09457e17cf95 AS builder

ARG GOLANGCI_LINT_VERSION
ARG GOSEC_VERSION
Expand All @@ -18,7 +18,7 @@ RUN freshclam
RUN git clone https://github.com/magefile/mage --depth 1 && \
cd mage && \
go run bootstrap.go && \
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin ${GOLANGCI_LINT_VERSION} && \
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/${GOLANGCI_LINT_VERSION}/install.sh | sh -s -- -b $(go env GOPATH)/bin ${GOLANGCI_LINT_VERSION} && \
curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s -- -b /usr/local/bin ${GOSEC_VERSION} && \
python3 -m pip install semgrep==${SEMGREP_VERSION} --ignore-installed --break-system-packages

Expand Down
31 changes: 16 additions & 15 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/grafana/plugin-validator

go 1.25.5
go 1.25.7

require (
github.com/Masterminds/semver/v3 v3.4.0
Expand All @@ -9,14 +9,14 @@ require (
github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964
github.com/fatih/color v1.18.0
github.com/go-enry/go-license-detector/v4 v4.3.1
github.com/google/osv-scanner/v2 v2.3.1
github.com/google/osv-scanner/v2 v2.3.3
github.com/hashicorp/go-version v1.8.0
github.com/jarcoal/httpmock v1.4.1
github.com/magefile/mage v1.15.0
github.com/mattn/go-shellwords v1.0.12
github.com/modelcontextprotocol/go-sdk v1.4.1
github.com/openai/openai-go v1.12.0
github.com/ossf/osv-schema/bindings/go v0.0.0-20251230224438-88c48750ddae
github.com/ossf/osv-schema/bindings/go v0.0.0-20260114034825-230b4a2f4d73
github.com/r3labs/diff/v3 v3.0.2
github.com/smartystreets/goconvey v1.8.1
github.com/sourcegraph/go-diff-patch v0.0.0-20240223163233-798fd1e94a8e
Expand All @@ -32,13 +32,13 @@ require (

require (
dario.cat/mergo v1.0.2 // indirect
github.com/BurntSushi/toml v1.5.0 // indirect
github.com/BurntSushi/toml v1.6.0 // indirect
github.com/CycloneDX/cyclonedx-go v0.9.3 // indirect
github.com/anchore/go-struct-converter v0.0.0-20250211213226-cce56d595160 // indirect
github.com/cyphar/filepath-securejoin v0.6.1 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/ianlancetaylor/demangle v0.0.0-20251118225945-96ee0021ea0f // indirect
github.com/jedib0t/go-pretty/v6 v6.7.5 // indirect
github.com/jedib0t/go-pretty/v6 v6.7.8 // indirect
github.com/mattn/go-runewidth v0.0.16 // indirect
github.com/package-url/packageurl-go v0.1.3 // indirect
github.com/rivo/uniseg v0.4.7 // indirect
Expand All @@ -56,12 +56,12 @@ require (
cloud.google.com/go/auth v0.16.2 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cyphar.com/go-pathrs v0.2.1 // indirect
deps.dev/api/v3 v3.0.0-20251127011616-f763ce91ff53 // indirect
deps.dev/api/v3alpha v0.0.0-20251127011616-f763ce91ff53 // indirect
deps.dev/util/maven v0.0.0-20251127011616-f763ce91ff53 // indirect
deps.dev/api/v3 v3.0.0-20260112033243-1270359b191b // indirect
deps.dev/api/v3alpha v0.0.0-20260112033243-1270359b191b // indirect
deps.dev/util/maven v0.0.0-20260112033243-1270359b191b // indirect
deps.dev/util/pypi v0.0.0-20250903005441-604c45d5b44b // indirect
deps.dev/util/resolve v0.0.0-20251127011616-f763ce91ff53 // indirect
deps.dev/util/semver v0.0.0-20251127011616-f763ce91ff53 // indirect
deps.dev/util/resolve v0.0.0-20260112033243-1270359b191b // indirect
deps.dev/util/semver v0.0.0-20260112033243-1270359b191b // indirect
github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect
github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20250520111509-a70c2aa677fa // indirect
github.com/GehirnInc/crypt v0.0.0-20230320061759-8cc1b52080c5 // indirect
Expand Down Expand Up @@ -121,14 +121,15 @@ require (
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/go-containerregistry v0.20.6 // indirect
github.com/google/jsonschema-go v0.4.2 // indirect
github.com/google/osv-scalibr v0.4.1-0.20251202121049-5e7e15f4a036 // indirect
github.com/google/osv-scalibr v0.4.3-0.20260204140443-347932c398c6 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
github.com/googleapis/gax-go/v2 v2.14.2 // indirect
github.com/gopherjs/gopherjs v1.17.2 // indirect
github.com/gorilla/websocket v1.5.3 // indirect
github.com/hhatto/gorst v0.0.0-20181029133204-ca9f730cac5b // indirect
github.com/icholy/digest v1.1.0 // indirect
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
github.com/jdkato/prose v1.2.1 // indirect
github.com/jtolds/gls v4.20.0+incompatible // indirect
Expand Down Expand Up @@ -218,17 +219,17 @@ require (
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
gonum.org/v1/gonum v0.16.0 // indirect
google.golang.org/genproto v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260112192933-99fd39fd28a9 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
google.golang.org/grpc v1.79.3 // indirect
gopkg.in/ini.v1 v1.67.0 // indirect
gopkg.in/ini.v1 v1.67.1 // indirect
gopkg.in/neurosnap/sentences.v1 v1.0.7 // indirect
gopkg.in/warnings.v0 v0.1.2 // indirect
modernc.org/libc v1.66.3 // indirect
modernc.org/mathutil v1.7.1 // indirect
modernc.org/memory v1.11.0 // indirect
modernc.org/sqlite v1.38.0 // indirect
osv.dev/bindings/go v0.0.0-20251208025524-721e0912c3f8 // indirect
osv.dev/bindings/go v0.0.0-20260119002423-9eebd248ed28 // indirect
sigs.k8s.io/yaml v1.6.0 // indirect
www.velocidex.com/golang/go-ntfs v0.2.0 // indirect
www.velocidex.com/golang/regparser v0.0.0-20250203141505-31e704a67ef7 // indirect
Expand Down
Loading
Loading