Skip to content

build(deps): bump the go-dev-dependencies group with 21 updates#296

Merged
mgoetzegb merged 3 commits intomainfrom
dependabot/go_modules/go-dev-dependencies-ef85650d0c
Mar 11, 2026
Merged

build(deps): bump the go-dev-dependencies group with 21 updates#296
mgoetzegb merged 3 commits intomainfrom
dependabot/go_modules/go-dev-dependencies-ef85650d0c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the go-dev-dependencies group with 21 updates:

Package From To
github.com/samber/lo 1.52.0 1.53.0
github.com/go-openapi/jsonpointer 0.22.4 0.22.5
github.com/go-openapi/jsonreference 0.21.4 0.21.5
github.com/go-openapi/spec 0.22.3 0.22.4
github.com/go-openapi/swag/conv 0.25.4 0.25.5
github.com/go-openapi/swag/jsonname 0.25.4 0.25.5
github.com/go-openapi/swag/jsonutils 0.25.4 0.25.5
github.com/go-openapi/swag/loading 0.25.4 0.25.5
github.com/go-openapi/swag/stringutils 0.25.4 0.25.5
github.com/go-openapi/swag/typeutils 0.25.4 0.25.5
github.com/go-openapi/swag/yamlutils 0.25.4 0.25.5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.65.0 0.67.0
go.opentelemetry.io/otel 1.40.0 1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.40.0 1.42.0
go.opentelemetry.io/otel/metric 1.40.0 1.42.0
go.opentelemetry.io/otel/trace 1.40.0 1.42.0
go.yaml.in/yaml/v2 2.4.3 2.4.4
golang.org/x/arch 0.24.0 0.25.0
golang.org/x/sync 0.19.0 0.20.0
golang.org/x/sys 0.41.0 0.42.0
golang.org/x/time 0.14.0 0.15.0

Updates github.com/samber/lo from 1.52.0 to 1.53.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.53.0

Announcing the latest release of lo with lots of good gifts! 🎁

🌊 First, a big thanks to @​d-enk for making lots of performance improvements in the recent weeks.

🧪 Second, this release introduces a new simd experimental package. If you run on an amd64 architecture and a recent CPU, you can perform very fast operations thanks to SIMD CPU instructions. -> Documentation: https://lo.samber.dev/docs/experimental/simd

💥 Third, this version adds *Err variants of many lo helpers (like MapErr, FlatMapErr, ReduceErr, etc.) whose callbacks can return an error and short-circuit execution when one occurs.

[!NOTE] The simd sub-package is considered not stable. We might break the initial API based on developers' feedback in the coming months.


Features & improvements

Deprecation

Performance improvements

... (truncated)

Commits

Updates github.com/go-openapi/jsonpointer from 0.22.4 to 0.22.5

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.5

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.


Documentation

Code quality

Miscellaneous tasks

Updates


People who contributed to this release


New Contributors

... (truncated)

Commits
  • e232aaf ci: upgraded bump-release workflow (new input format) (#106)
  • 9f448d5 chore: doc, test, lint update (#105)
  • 565d4a2 chore(deps): bump github.com/go-openapi/testify/v2
  • 869667c chore(deps): bump github.com/go-openapi/testify/v2
  • 83371ca chore(deps): bump the development-dependencies group with 7 updates
  • 7ad57ed chore(deps): bump the development-dependencies group with 7 updates
  • 26e9371 chore(deps): bump github.com/go-openapi/testify/v2
  • fb213a3 chore(deps): bump github.com/go-openapi/testify/v2
  • e481e05 chore(deps): bump the development-dependencies group with 7 updates
  • 62b2c8e doc: updated contributors file
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.4 to 0.21.5

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v0.21.5

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.


Documentation

Code quality

Testing

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 8b85573 chore: doc, lint, tests (#79)
  • f9fd8bd build(deps): bump the development-dependencies group with 7 updates
  • 76deb10 build(deps): bump the development-dependencies group with 7 updates
  • 7b4cec2 build(deps): bump github.com/go-openapi/testify/v2
  • fecb9ac build(deps): bump github.com/go-openapi/testify/v2
  • 8f205c3 build(deps): bump the development-dependencies group with 7 updates
  • 9d5c22a build(deps): bump github.com/go-openapi/testify/v2
  • 2d9cd9b doc: updated contributors file
  • 4b5d805 doc: announced new discord channel
  • a738066 doc: added basic usage in readme and testable examples
  • Additional commits viewable in compare view

Updates github.com/go-openapi/spec from 0.22.3 to 0.22.4

Release notes

Sourced from github.com/go-openapi/spec's releases.

v0.22.4

0.22.4 - 2026-03-03

Full Changelog: go-openapi/spec@v0.22.3...v0.22.4

9 commits in this release.


Documentation

Code quality

Updates


People who contributed to this release


spec license terms

License

Commits
  • d6177ef chore: doc, tests, lint (#255)
  • 0c2d5d4 build(deps): bump github.com/go-openapi/testify/v2
  • 7ca5d97 build(deps): bump the development-dependencies group with 7 updates
  • 71eebab build(deps): bump github.com/go-openapi/testify/v2
  • d708159 build(deps): bump github.com/go-openapi/testify/v2
  • d181245 build(deps): bump the development-dependencies group with 7 updates
  • 02c28f2 build(deps): bump github.com/go-openapi/testify/v2
  • 22037ac build(deps): bump the development-dependencies group with 7 updates
  • 5fc39a0 doc: updated contributors file
  • See full diff in compare view

Updates github.com/go-openapi/swag/conv from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.


Documentation

Code quality

Testing

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 86905cc chore: prepare release v0.25.5
  • 345f85b doc: updated docs, links (#180)
  • 01b074b ci: updated ci workflows (#179)
  • 607decd build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 4924f95 doc: updated contributors file
  • 281942d test: upgraded tests to use generics (#176)
  • b9f9e45 test: upgraded to go-openapi/testify@v2.3.0 (#175)
  • b7e96e1 ci: upgraded shared workflows (fixed secret propagation, fuzz matrix) (#174)
  • 236d975 ci: upgraded shared workflows (fixes mono-repo releases) (#173)
  • fd4d373 build(deps): bump the development-dependencies group across 2 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/jsonname from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/jsonname's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.


Documentation

Code quality

Testing

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 86905cc chore: prepare release v0.25.5
  • 345f85b doc: updated docs, links (#180)
  • 01b074b ci: updated ci workflows (#179)
  • 607decd build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 4924f95 doc: updated contributors file
  • 281942d test: upgraded tests to use generics (#176)
  • b9f9e45 test: upgraded to go-openapi/testify@v2.3.0 (#175)
  • b7e96e1 ci: upgraded shared workflows (fixed secret propagation, fuzz matrix) (#174)
  • 236d975 ci: upgraded shared workflows (fixes mono-repo releases) (#173)
  • fd4d373 build(deps): bump the development-dependencies group across 2 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/jsonutils from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/jsonutils's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.


Documentation

Code quality

Testing

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 86905cc chore: prepare release v0.25.5
  • 345f85b doc: updated docs, links (#180)
  • 01b074b ci: updated ci workflows (#179)
  • 607decd build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 4924f95 doc: updated contributors file
  • 281942d test: upgraded tests to use generics (#176)
  • b9f9e45 test: upgraded to go-openapi/testify@v2.3.0 (#175)
  • b7e96e1 ci: upgraded shared workflows (fixed secret propagation, fuzz matrix) (#174)
  • 236d975 ci: upgraded shared workflows (fixes mono-repo releases) (#173)
  • fd4d373 build(deps): bump the development-dependencies group across 2 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/loading from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/loading's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.


Documentation

Code quality

Testing

Miscellaneous tasks

Updates

  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] in #178 ...
  • build(deps): bump the development-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #172 ...
  • build(deps): bump the development-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #170 ...
  • build(deps): bump the development-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #168 ...
  • build(deps): bump the development-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in #167 ...
  • build(deps): bump the development-dependencies group across 2 directories with 1 ...

    Description has been truncated

Bumps the go-dev-dependencies group with 21 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.52.0` | `1.53.0` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.4` | `0.22.5` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.4` | `0.21.5` |
| [github.com/go-openapi/spec](https://github.com/go-openapi/spec) | `0.22.3` | `0.22.4` |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/typeutils](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/go-openapi/swag/yamlutils](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.67.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.3` | `2.4.4` |
| [golang.org/x/arch](https://github.com/golang/arch) | `0.24.0` | `0.25.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.20.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` |


Updates `github.com/samber/lo` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.52.0...v1.53.0)

Updates `github.com/go-openapi/jsonpointer` from 0.22.4 to 0.22.5
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.4...v0.22.5)

Updates `github.com/go-openapi/jsonreference` from 0.21.4 to 0.21.5
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v0.21.4...v0.21.5)

Updates `github.com/go-openapi/spec` from 0.22.3 to 0.22.4
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.3...v0.22.4)

Updates `github.com/go-openapi/swag/conv` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/loading` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/typeutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/yamlutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.65.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.67.0)

Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `golang.org/x/arch` from 0.24.0 to 0.25.0
- [Commits](golang/arch@v0.24.0...v0.25.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/typeutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/swag/yamlutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.67.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/arch
  dependency-version: 0.25.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026
@dependabot dependabot bot requested review from a team as code owners March 9, 2026 04:09
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 9, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 7 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 9db88e5.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

go.mod

PackageVersionLicenseIssue Type
github.com/go-openapi/jsonpointer0.22.5NullUnknown License
github.com/go-openapi/spec0.22.4NullUnknown License
github.com/samber/lo1.53.0NullUnknown License
golang.org/x/arch0.25.0NullUnknown License
golang.org/x/sync0.20.0NullUnknown License
golang.org/x/sys0.42.0NullUnknown License
golang.org/x/time0.15.0NullUnknown License
Allowed Licenses: 0BSD, AGPL-3.0-or-later, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause-Clear, BSD-3-Clause, BSL-1.0, bzip2-1.0.6, CAL-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-4.0, CC0-1.0, EPL-2.0, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-2.0, GPL-3.0-only, GPL-3.0-or-later, GPL-3.0, ISC, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1, LGPL-3.0-only, LGPL-3.0, LGPL-3.0-or-later, MIT, MIT-CMU, MPL-1.1, MPL-2.0, OFL-1.1, PSF-2.0, Python-2.0, Python-2.0.1, Unicode-3.0, Unicode-DFS-2016, Unlicense, Zlib, ZPL-2.1

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
gomod/github.com/go-openapi/jsonpointer 0.22.5 UnknownUnknown
gomod/github.com/go-openapi/jsonreference 0.21.5 🟢 8.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/14 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/spec 0.22.4 UnknownUnknown
gomod/github.com/go-openapi/swag/conv 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/jsonname 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/jsonutils 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/loading 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/stringutils 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/typeutils 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/go-openapi/swag/yamlutils 0.25.5 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/14 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
gomod/github.com/samber/lo 1.53.0 UnknownUnknown
gomod/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.67.0 🟢 8.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 42 contributing companies or organizations
gomod/go.opentelemetry.io/otel 1.42.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices🟢 5badge detected: Passing
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
gomod/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.42.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices🟢 5badge detected: Passing
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
gomod/go.opentelemetry.io/otel/metric 1.42.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices🟢 5badge detected: Passing
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
gomod/go.opentelemetry.io/otel/trace 1.42.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices🟢 5badge detected: Passing
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
gomod/go.yaml.in/yaml/v2 2.4.4 UnknownUnknown
gomod/golang.org/x/arch 0.25.0 UnknownUnknown
gomod/golang.org/x/sync 0.20.0 UnknownUnknown
gomod/golang.org/x/sys 0.42.0 UnknownUnknown
gomod/golang.org/x/time 0.15.0 UnknownUnknown

Scanned Files

  • go.mod

@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 9, 2026

Conventional Commits Report

Type Number
Bug Fixes 2

🚀 Conventional commits found.

@codecov
Copy link
Copy Markdown

codecov bot commented Mar 9, 2026

Codecov Report

❌ Patch coverage is 36.36364% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.23%. Comparing base (d3e4d88) to head (9db88e5).
⚠️ Report is 2 commits behind head on main.

Files with missing lines Patch % Lines
pkg/configReader/helper/createEnvFile.go 0.00% 7 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #296      +/-   ##
==========================================
- Coverage   57.29%   57.23%   -0.07%     
==========================================
  Files          70       70              
  Lines        3939     3945       +6     
==========================================
+ Hits         2257     2258       +1     
- Misses       1486     1491       +5     
  Partials      196      196              
Flag Coverage Δ
opensearch-tests 95.68% <ø> (ø)
postgres-tests 92.03% <ø> (ø)
unit-tests 51.84% <36.36%> (-0.07%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mgoetzegb mgoetzegb merged commit 4e57f18 into main Mar 11, 2026
13 checks passed
@mgoetzegb mgoetzegb deleted the dependabot/go_modules/go-dev-dependencies-ef85650d0c branch March 11, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants