Dependency Dashboard
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 15/100
- Issue 类型
- 重构
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
- 技术栈
- docker, github-actions, go
- 领域
- build-system, ci-cd, devops
调研方向
这是一个自动化的 Renovate dashboard，而不是一项范围明确的单一更改。请审查与 .github/workflows/ci.yaml、licensing.yaml、release.yaml、validate-renovate.yml、zizmor.yaml、Dockerfile 和 go.mod 相关的已链接 pull requests；完成的标志是处理这些依赖项更新，而不是完成此 issue 中定义的一项更改。
由索引模型根据 Issue 内容生成。
描述
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Abandoned Dependencies
The following dependencies have not received updates for an extended period and may be unmaintained.
View abandoned dependencies (1)
[!NOTE]
Packages are marked as abandoned when they exceed theabandonmentThresholdsince their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
| Datasource | Package | Last Updated |
|---|---|---|
| gomod | github.com/jessevdk/go-flags | 2024-06-15 |
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- chore(deps): update go toolchain directive to v1.25.13 [security]
- chore(deps): update module golang.org/x/net to v0.56.0 [security]
- fix(deps): update all non-major dependencies (
actions/setup-go,astral-sh/setup-uv,docker/dockerfile,docker/login-action,github.com/shurcooL/githubv4,github/codeql-action,go,golang.org/x/oauth2,golangci/golangci-lint-action,pscale.dev/wolfi-prod/git) - chore(deps): update actions/setup-go action to v7
- chore(deps): update astral-sh/setup-uv action to v10
- chore(deps): update docker/login-action action to v4
- chore(deps): update goreleaser/goreleaser-action action to v7
- Click on this checkbox to rebase all open PRs at once
Vulnerabilities
[!IMPORTANT]
24/24CVEs have Renovate fixes.
Detected Dependencies
dockerfile (1)
Dockerfile (2)
docker/dockerfile 1.20@sha256:26147acbda4f14c5add9946e2fd2ed543fc402884fd75146bd342a7f6271dc1d→ [Updates:1.27]pscale.dev/wolfi-prod/git 2.51.2→ [Updates:2.55.0]
github-actions (5)
.github/workflows/ci.yaml (8)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00→ [Updates:v7,v6]golangci/golangci-lint-action v9@0a35821d5c230e903fcfe077583637dea1b27b47→ [Updates:v9]goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00→ [Updates:v7,v6]golangci/golangci-lint-action v9@0a35821d5c230e903fcfe077583637dea1b27b47→ [Updates:v9]goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a→ [Updates:v7].github/workflows/licensing.yaml (2)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00→ [Updates:v7,v6].github/workflows/release.yaml (8)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00→ [Updates:v7,v6]golangci/golangci-lint-action v9@0a35821d5c230e903fcfe077583637dea1b27b47→ [Updates:v9]goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a→ [Updates:v7]actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1actions/setup-go v6@44694675825211faa026b3c33043df3e48a5fa00→ [Updates:v7,v6]goreleaser/goreleaser-action v6@e435ccd777264be153ace6237001ef4d979d3a7a→ [Updates:v7]docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef→ [Updates:v4,v3].github/workflows/validate-renovate.yml (2)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1ghcr.io/renovatebot/renovate 44.13.1@sha256:3e4149122921d530218a4ca809c59636faa668b330e4c9ea7f9ee1e20ea505dd→ [Updates:44.107.0].github/workflows/zizmor.yaml (3)
actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1astral-sh/setup-uv v7@5a7eac68fb9809dea845d802897dc5c723910fa3→ [Updates:v10.0.1,v7]github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db→ [Updates:v4]
gomod (1)
go.mod (6)
go 1.24.0→ [Updates:1.27.1]go 1.25.10→ [Updates:1.25.13]github.com/jessevdk/go-flags v1.6.1github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7@48295856cce7→ [Updates:v0.0.0-20260209031235-2402fdf4a9ed]golang.org/x/oauth2 v0.33.0→ [Updates:v0.37.0]golang.org/x/net v0.38.0→ [Updates:v0.56.0]
renovate-config (1)
renovate.json
- Check this box to trigger a request for Renovate to run again on this repository
- 主要语言
- Go
- 星标
- 60
- 派生
- 2
- PR 合并指标
- 30 天内没有已合并 PR
贡献指南
这个仓库没有索引到贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
planetscale/ghcommit 的其他 Issue
-
难度 3/5 1-2 天 新手友好度 45/100
planetscale/ghcommit#83 · 5 条评论 ·
查看 planetscale/ghcommit 的全部 Issue
相似的 Issue
-
textual definition
难度 1/5 1 小时以内 新手友好度 90/100
geneontology/go-ontology#32653 ·
-
难度 1/5 1 小时以内 新手友好度 75/100
-
needs design
难度 2/5 1-3 小时 新手友好度 75/100
-
Priority/High ready-for-agent Severity/Major Type/Bug
难度 2/5 1-3 小时 新手友好度 75/100
-
难度 2/5 1-3 小时 新手友好度 70/100