Skip to content

Conversation

@trinitronx
Copy link
Contributor

Checklist

Not all of these might apply to your change but the more you are able to check
the easier it will be to get your contribution merged.

  • CI passes - See: Test CI: Fix issue #99 Trivy Vulnerability Detections trinitronx/checkmake#1
  • Description of proposed change:
    • Fix CVE alerts #99
    • Bump Go to 1.24
    • Bump all dependencies to latest except olekukonko/tablewriter (kept @ v0.0.5 due to breaking API changes)
    • Bump GitHub Actions Go version to 1.24
    • Bump all GitHub Actions to latest & fix warnings / annotations
    • Bump Docker container to Go 1.24 & latest stable Alpine 3.22
  • Documentation (README, docs/, man pages) is updated
  • Existing issue is referenced if there is one - CVE alerts #99
  • Unit tests for the proposed change - N/A (no change, but passing with CI updates & fixes listed above)

Warning was:

     1 warning found (use docker --debug to expand):
     - FromAsCasing: 'as' and 'FROM' keywords' casing do not match (line 1)
New setup-go@v5 action supports caching, but only if go.sum file exists.
Fix is to checkout repo before running setup-go action.

Warning was:

    Warning: Restore cache failed: Dependencies file is not found in /home/runner/work/checkmake/checkmake. Supported file pattern: go.sum
Match versions to latest:

- actions/checkout@v4
- actions/setup-python@v5
- pre-commit/action@v3.0.1
@trinitronx trinitronx mentioned this pull request Jul 18, 2025
@lafrenierejm
Copy link
Contributor

See also #126 to automate future dependency updates.

@obnoxxx
Copy link
Collaborator

obnoxxx commented Aug 11, 2025

Thank you for your conytibution, @trinitronx !

This is now outdated since depenabot started to bring in some updates. Closing this, but we might decide to start it over if dependabot does not catch everything..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE alerts

3 participants