Skip to content

chore: bump Go to 1.27.1 and update dependencies - #210

Merged
janfuhrer merged 1 commit into
mainfrom
chore/update-dependencies
Sep 7, 2026
Merged

chore: bump Go to 1.27.1 and update dependencies#210
janfuhrer merged 1 commit into
mainfrom
chore/update-dependencies

Conversation

@janfuhrer

Copy link
Copy Markdown
Member
  • update Go modules (prometheus/client_model, common, procfs, protobuf)
  • bump GOTOOLCHAIN to go1.27.1 in codeql.yml and gosec.yml, -compat=1.27 in Makefile
  • bump ko to v0.19.1
  • bump pre-commit golangci-lint to v2.13.2 and sync version in golangci-lint.yml
  • bump gosec pre-commit hook to v2.29.0 to match CI action
  • pin ko base image cgr.dev/chainguard/static by digest
  • add #nosec G703 for operator-configured secret file paths (new gosec taint rule)
  • CLAUDE.md: fix prek subcommand, document ko base image digest update

What this PR does:

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #

Notes for Reviewer:

Checklist:

  • I have read and understood the CONTRIBUTING and CODE_OF_CONDUCT documents
  • All commits are signed (see Signing Commits)
  • Pull Request title in the format of Conventional Commits e.g. feat|fix|chore|docs|...: Changed Something
  • Updated documentation in the README.md file (e.g. new parameters, environment variables, return values, ...)

@janfuhrer janfuhrer self-assigned this Sep 7, 2026
@janfuhrer
janfuhrer requested a review from a team as a code owner September 7, 2026 09:17

@adberger adberger left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

- update Go modules (prometheus/client_model, common, procfs, protobuf)
- bump GOTOOLCHAIN to go1.27.1 in codeql.yml and gosec.yml, -compat=1.27 in Makefile
- bump ko to v0.19.1
- bump pre-commit golangci-lint to v2.13.2 and sync version in golangci-lint.yml
- bump gosec pre-commit hook to v2.29.0 to match CI action
- pin ko base image cgr.dev/chainguard/static by digest
- add #nosec G703 for operator-configured secret file paths (new gosec taint rule)
- CLAUDE.md: fix prek subcommand, document ko base image digest update
@janfuhrer
janfuhrer force-pushed the chore/update-dependencies branch from 6cc3186 to b59438d Compare September 7, 2026 09:30

@adberger adberger left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@janfuhrer
janfuhrer merged commit c261411 into main Sep 7, 2026
7 checks passed
@janfuhrer
janfuhrer deleted the chore/update-dependencies branch September 7, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants