Skip to content

build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.2 - #321

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.28.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.28.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/aws/smithy-go from 1.27.8 to 1.28.2.

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-09-18)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.

... (truncated)

Commits
  • 9b28af0 Release 2026-09-18
  • f59df88 Avoid slice allocation in ValidateEndpointHost (#705)
  • 7c16d7f fix decode panic on event stream header type and bad cbor string/blob len (#713)
  • c60819a fix initial-message race (#712)
  • d05a672 fix v2 event streams orphaning the result channel on error paths in schema-se...
  • fe95176 Revert "fix v2 event streams orphaning the result channel on error paths in s...
  • 9847245 fix v2 event streams orphaning the result channel on error paths in schema-serde
  • 9eba49f Print stacktrace when smithy-build fails (#708)
  • 959c6ab Keep a trailing slash when JoinPath right operand is a slash. (#698)
  • d253285 update README
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/aws/smithy-go](https://github.com/aws/smithy-go) from 1.27.8 to 1.28.2.
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.8...v1.28.2)

---
updated-dependencies:
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 26, 2026
@github-actions

Copy link
Copy Markdown

bulwark

  • ❌ scan — 4 govulncheck findings
error output
… truncated to the last 20000 bytes — full log in the run artifact linked below …
rnal/otelcol/install.go
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/paths.go
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/shell.go
[gosec] 2026/09/26 15:43:28 Import directory: /home/runner/work/inforge/inforge/internal/sizes
[gosec] 2026/09/26 15:43:28 Checking package: pgrole
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/pgrole/pgrole.go
[gosec] 2026/09/26 15:43:28 Import directory: /home/runner/work/inforge/inforge/internal/crowdsec
[gosec] 2026/09/26 15:43:28 Checking package: sizes
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/sizes/sizes.go
[gosec] 2026/09/26 15:43:28 Import directory: /home/runner/work/inforge/inforge/internal/grant
[gosec] 2026/09/26 15:43:28 Checking package: crowdsec
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/install.go
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/paths.go
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/shell.go
[gosec] 2026/09/26 15:43:28 Import directory: /home/runner/work/inforge/inforge/internal/meshplan
[gosec] 2026/09/26 15:43:28 Checking package: loader
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/loader/loader.go
[gosec] 2026/09/26 15:43:28 Checking file: /home/runner/work/inforge/inforge/internal/loader/observability.go
[gosec] 2026/09/26 15:43:28 Import directory: /home/runner/work/inforge/inforge/internal/release
[gosec] 2026/09/26 15:43:29 Checking package: release
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/release/manifest.go
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/release/store.go
[gosec] 2026/09/26 15:43:29 Checking package: meshplan
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/deploy.go
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/meshplan.go
[gosec] 2026/09/26 15:43:29 Import directory: /home/runner/work/inforge/inforge/cmd/inforge
[gosec] 2026/09/26 15:43:29 Import directory: /home/runner/work/inforge/inforge/internal/backupstore
[gosec] 2026/09/26 15:43:29 Checking package: grant
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/grant/database.go
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/grant/grant.go
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/grant/pki.go
[gosec] 2026/09/26 15:43:29 Import directory: /home/runner/work/inforge/inforge/internal/cloudinit
[gosec] 2026/09/26 15:43:29 Checking package: backupstore
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/backupstore/store.go
[gosec] 2026/09/26 15:43:29 Import directory: /home/runner/work/inforge/inforge/internal/dbbackup
[gosec] 2026/09/26 15:43:29 Checking package: cloudinit
[gosec] 2026/09/26 15:43:29 Checking file: /home/runner/work/inforge/inforge/internal/cloudinit/cloudinit.go
[gosec] 2026/09/26 15:43:29 Import directory: /home/runner/work/inforge/inforge/internal/grafana
[gosec] 2026/09/26 15:43:30 Checking package: grafana
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/grafana/grafana.go
[gosec] 2026/09/26 15:43:30 Checking package: dbbackup
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/backup.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/deploy.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/install.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/paths.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/restore.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/shell.go
[gosec] 2026/09/26 15:43:30 Checking package: program
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/adr0042.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/dbbackup.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/dbcluster.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/dbdeploy.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/deploykey.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/encrypted.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/grafana.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/mesh.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/pkigrant.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/program.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/program/secretresolve.go
[gosec] 2026/09/26 15:43:30 Checking package: main
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/arch.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/config.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/db.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/deploy.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_down.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_reap.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_up.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/main.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/matrix.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/meshbaseline.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/pki.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/plugins.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/preview.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/release.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/releases.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/report.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/secret.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/service.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/servicecmds.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/serviceinspect.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/sshpush.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/stack.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/statelock.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/update.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/validate.go
[gosec] 2026/09/26 15:43:30 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/version.go
Results:


Summary:
  Gosec  : dev
  Files  : 138
  Lines  : 30994
  Nosec  : 45
  Issues : 0

go: downloading golang.org/x/vuln v1.7.0
go: downloading golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5
go: downloading golang.org/x/mod v0.39.0
go: downloading golang.org/x/tools v0.49.0
=== Symbol Results ===

Vulnerability #1: GO-2026-6443
    Server panic via missing authority or Host headers in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6443
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.82.1
    Fixed in: google.golang.org/grpc@v1.82.2
    Example traces found:
      #1: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.http2Server.HandleStreams

Vulnerability #2: GO-2026-6355
    Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6355
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls ssh.NewClientConn

Vulnerability #3: GO-2026-6354
    Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6354
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls ssh.NewClientConn

Vulnerability #4: GO-2026-6348
    Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in
    google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6348
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.82.1
    Fixed in: google.golang.org/grpc@v1.83.1
    Example traces found:
      #1: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls mem.BufferSlice.MaterializeToBuffer
      #2: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls mem.IsBelowBufferPoolingThreshold
      #3: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls mem.NewBuffer
      #4: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls mem.ReadAll
      #5: internal/secretstore/age.go:70:20: secretstore.Encrypt calls armor.armoredWriter.Close, which eventually calls mem.writer.Write
      #6: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ClientStream.Close
      #7: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ClientStream.Header
      #8: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ClientStream.Read
      #9: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ClientStream.RecvCompress
      #10: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ClientStream.TrailersOnly
      #11: internal/registry/registry.go:268:17: registry.registry.DNS calls sync.Once.Do, which eventually calls transport.NewHTTP2Client
      #12: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.NewServerTransport
      #13: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.ServerStream.Read
      #14: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.Stream.ReadMessageHeader
      #15: cmd/inforge/preview.go:100:28: inforge.runPreview calls auto.Stack.Preview, which eventually calls transport.http2Client.Close
      #16: cmd/inforge/preview.go:100:28: inforge.runPreview calls auto.Stack.Preview, which eventually calls transport.http2Client.GracefulClose
      #17: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.http2Client.NewStream
      #18: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.http2Server.Close
      #19: providers/hetzner/compute.go:250:33: hetzner.HetznerCompute.Create calls hcloud.NewServer, which eventually calls transport.http2Server.HandleStreams

Your code is affected by 4 vulnerabilities from 2 modules.
This scan also found 0 vulnerabilities in packages you import and 2
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
creating virtual environment...
installing semgrep from spec 'semgrep==1.173.0'...
done! ✨ 🌟 ✨
  installed package semgrep 1.173.0, installed using Python 3.12.3
  These apps are now available
    - pysemgrep
    - semgrep
                  
                  
┌────────────────┐
│ Debugging Info │
└────────────────┘
                  
  SCAN ENVIRONMENT
  versions    - semgrep 1.173.0 on python 3.12.3                                       
  environment - running in environment github-actions, triggering event is pull_request
Fixing git state for github action pull request
Not on head ref: c0c63beb328d11256d422a877cbff2f6c5a1baea; checking that out now.
            
  CONNECTION
Using b429a6cc71e5ac1730e904afc3d71d378b494c4d as the merge-base of b429a6cc71e5ac1730e904afc3d71d378b494c4d and c0c63beb328d11256d422a877cbff2f6c5a1baea
  Initializing scan (deployment=wardnet, scan_id=234798142)  
  Enabled products: Code, Supply Chain                               
        
  ENGINE
Semgrep Pro Engine will be installed in /opt/pipx/venvs/semgrep/lib/python3.12/site-packages/semgrep/bin/semgrep-core-proprietary
Downloading... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 316.6/316.6 MB 525.7 MB/s 0:00:00
Successfully installed Semgrep Pro Engine (version 1.173.0)!

  Using git merge base detected from environment for diff scans: b429a6cc71e5ac1730e904afc3d71d378b494c4d
               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 2 files tracked by git with 2944 Code rules, 1469 Supply Chain rules:
            
            
  CODE RULES
  Scanning 2 files with 47 <multilang> rules.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       146             1469                                             
  website/yarn.lock    Skipped             Unknown     -                  -                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Basic           1002                                                                                                  
  Reachability     444                                                                                                  
  Malicious         23                                                                                                  
                                                                                                                        
  Current version has 2 findings.

Creating git worktree from 'b429a6cc71e5ac1730e904afc3d71d378b494c4d' to scan baseline.
  Will report findings introduced by these commits (may be incomplete for shallow checkouts):
    * c0c63be build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.2

               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 1 file tracked by git with 2 Supply Chain rules:
            
            
  CODE RULES
  No code rules to run.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       146                2                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Reachability       2                                                                                                  
                                                                                                                        
  Uploading scan results  
  Finalizing scan                         
                
┌──────────────┐
│ Scan Summary │
└──────────────┘
✅ CI scan completed successfully.
 • Findings: 0 (0 blocking)
 • Rules run: 116377
 • Targets scanned: 2
 • Parsed lines: ~100.0%
 • Scan skipped: 
   ◦ Matching --exclude patterns: 89
   ◦ Files matching .semgrepignore patterns: 124
 • Scan was limited to files changed since baseline commit.
 • For a detailed list of skipped files and lines, run semgrep with the --verbose flag
CI scan completed successfully.
  View results in Semgrep Cloud Platform:
    https://semgrep.dev/orgs/wardnet/findings?repo=wardnet/inforge&ref=refs/pull/321/merge
    https://semgrep.dev/orgs/wardnet/supply-chain/vulnerabilities?repo=wardnet/inforge&ref=refs/pull/321/merge
  No blocking findings so exiting with code 0

A new version of Semgrep is available. See https://semgrep.dev/docs/upgrading
[PASS] gosec
[FAIL] govulncheck
[PASS] semgrep
Error: 1 check(s) failed
bulwark: 1 check(s) failed
  • ✅ coverage — go: 67.3% (baseline 67.3%)

📦 Full bulwark output — complete scan and coverage logs.

@dependabot @github

dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #345.

@dependabot dependabot Bot closed this Oct 17, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/aws/smithy-go-1.28.2 branch October 17, 2026 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants