Skip to content

chore(deps): bump github.com/complytime/complypack from 0.0.8 to 0.0.9 - #812

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/complytime/complypack-0.0.9
Open

chore(deps): bump github.com/complytime/complypack from 0.0.8 to 0.0.9#812
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/complytime/complypack-0.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/complytime/complypack from 0.0.8 to 0.0.9.

Release notes

Sourced from github.com/complytime/complypack's releases.

v0.0.9

Changelog

New Features

  • 14b613d98eb31e1695a26cd883eacb075b6296ef: feat: add GoReleaser release pipeline and version command (@​jpower432)
  • 61f7548032cc7235c5152b53b7905d396e518d21: feat: add Homebrew formula, cask, and RPM packaging (@​jpower432)
  • b0c5eb901da05515ef6aadf73eed9cf3e1dec410: feat: add controls-level summaries to get_assessment_requirements (@​em-redhat)
  • 6ff083564dd5f6daf6024c3692fec8c5028fcfea: feat: add coverage and gap report engine (@​hbraswelrh)
  • fb8054bf74fe879f26beb9bcd7d4306519a478d6: feat: add lipgloss-styled terminal output for coverage report (@​hbraswelrh)
  • 48fdd63616031e2258afddeb2738db8279f5af38: feat: add policy validation rubric and ban url field in mapping references (@​trevor-vaughan)
  • 878a091d70da4899df87590af338225c7df40bfc: feat: redesign setup skill to target complypack.yaml and cache warmup (@​yvonnedevlinrh)
  • 447513c971580febd3aafb8bf868b244830bfbb3: feat: require executor field on automated evaluation methods (@​hbraswelrh)

Bug Fixes

  • 4feda12a89976be6e5dad7428903fdef9bc71bb1: fix(ci): bump org-infra workflows to v0.7.1 and delegate release to reusable jobs (@​hbraswelrh)
  • b0c371f83fd87f1e6ec7afd5a8457a6e1e2a0c62: fix(ci): bump reusable_publish_ghcr.yml from v0.5.0 to v0.6.0 (@​sonupreetam)
  • fc89a505da84142447f9e0afc55cc11078d62bd9: fix(ci): harden release pipeline and complete org-infra v0.7.1 bump (@​hbraswelrh)
  • 80f479390fc137dcdd26df7d601e39063305c584: fix(ci): remove duplicate concurrency group causing release deadlock (@​hbraswelrh)
  • 5e257ee29c43a4ea19a5104040f4a5516eaf6c3b: fix(docs): remove Homebrew install section with no backing infrastructure (@​hbraswelrh)
  • 62831d845089dd6998cc738b9074074bacb7363c: fix(skills): address review feedback on setup skill (@​yvonnedevlinrh)
  • 6f10904d2b63ebe96ca3755ea153c3895b5f3b8d: fix(version): replace testify with stdlib assertions in version_test.go (@​hbraswelrh)
  • b2d7967a87c69d3b1cb201bbe14526d4223546d8: fix(version): use cmd.OutOrStdout(), add wiring tests, strengthen assertions (@​hbraswelrh)
  • 30396821819dc8a069c79fb63caa42145aeaff0a: fix: address PR #190 review feedback for OCI reference edge cases (@​em-redhat)
  • 8772abf7b5683233ea0028069eec70c89fb59dd9: fix: address PR #192 review feedback (@​hbraswelrh)
  • 71c220dc9d78ef2ac1ceacc785803b57155eac58: fix: address review council findings for coverage engine (@​hbraswelrh)
  • 57650f6fae92c6ad5995736a5fbbe4d7235cd488: fix: address review feedback on build-assessment (@​hbraswelrh)
  • 78530b42f0faa5e1b9e858af068184831acc7667: fix: address review findings in controls-level summaries (@​em-redhat)
  • f439ff918e89a2e889651bf8b31231db300c1897: fix: address review findings in domain extraction (@​yvonnedevlinrh)
  • b514ebeca555852815546e05d0995a5e5dc58655: fix: preserve dotted keys as atomic path segments in contract checker (@​em-redhat)
  • 06cedb213981dea784f08cad7ad4e788d075141b: fix: remove gemara MCP server row from setup skill reference table (@​yvonnedevlinrh)
  • b38b3d3ef88e4ad0798a117824e8a7afded74219: fix: remove goimports lint issues in assessment files (@​yvonnedevlinrh)
  • 0d6029509524fe29c49d1c1a4c5ff63ff1951619: fix: remove homebrew_casks and go mod tidy from release config (@​jpower432)
  • 84678aaa479ff77f5e383bb7eeb2a9f39ae9c176: fix: remove last complyctl reference from SKILL.md (@​hbraswelrh)
  • 74ddb7ae4073a4c57dcc68e427981dcc73f4213f: fix: replace OCI reference substring heuristic with parse-based detection (@​em-redhat)
  • 7790b042bd83c58a156cfd96712ab6776c54db20: fix: replace deprecated brews with homebrew_casks (@​jpower432)
  • 188173c1cb29e6f1927b90098cd3053c478a6839: fix: resolve goimports alignment and gosec G306 lint errors (@​hbraswelrh)
  • a04785f473c353bd8436816e210353a120853e43: fix: skip _test.rego files during pack validation and archiving (@​yvonnedevlinrh)
  • fc53b5d186e0fa0ecb4e9835dd60a91dc08f6b38: fix: skip non-Rego files in test runner to prevent parse errors (@​hbraswelrh)
  • 2c6872b0eda673aff88447b70643154aa3bbd411: fix: updates build-assessment skill context (@​hbraswelrh)
  • f80be65d1e543cb49c850f1293407e1bd6076fbc: refactor: extract shared domain infrastructure for CLI/MCP parity (@​yvonnedevlinrh)

Dependency Updates

  • 92e431ec4e2534cf3e7b523917b576f9cc7139f2: chore(deps): Update go module directive to v1.26.5 (@​complytime-renovate[bot])

Infrastructure Updates

  • 9a3c36fdf2fc9767ac294da9162d1b0def1bc6e3: ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 (@​dependabot[bot])
  • 72e1ded40a5b1db2770fb31bd5a1b813c720b8c9: ci(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (@​dependabot[bot])
  • 0588acae194f6f7f6a39b5b902c41df106a25b67: ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml (@​dependabot[bot])
  • 8fdab67223b88825fa225b6c1d3b789e048df196: ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml (#207) (@​dependabot[bot])
  • b187720eb881ee0453ff1cf37bcc506baec3d1f7: ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml (@​dependabot[bot])
  • aaaf2a522526d814fe1eb8b6553b4428be9d94b2: ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml (@​dependabot[bot])
  • 2653ebe9fb2145bb8127ed932fee324693a8462c: ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml (#214) (@​dependabot[bot])
  • 6b428b9e71835ce8248f2a39977858c6c5395a61: ci(deps): bump complytime/org-infra/.github/workflows/reusable_publish_ghcr.yml (@​dependabot[bot])
  • 367c3b0ba397d7134ed5c25106711de83e07186d: ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml (@​dependabot[bot])

... (truncated)

Commits
  • ee6484c Merge pull request #222 from hbraswelrh/fix/release-concurrency-deadlock
  • 80f4793 fix(ci): remove duplicate concurrency group causing release deadlock
  • 25115b3 Merge pull request #137 from jpower432/feat/goreleaser-release-pipeline
  • fc89a50 fix(ci): harden release pipeline and complete org-infra v0.7.1 bump
  • b2d7967 fix(version): use cmd.OutOrStdout(), add wiring tests, strengthen assertions
  • 6f10904 fix(version): replace testify with stdlib assertions in version_test.go
  • 5e257ee fix(docs): remove Homebrew install section with no backing infrastructure
  • 4feda12 fix(ci): bump org-infra workflows to v0.7.1 and delegate release to reusable ...
  • 2d25c9c chore: remove homebrew_casks from release config
  • 0b02472 chore: update .github/workflows/release.yml
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 10, 2026 01:05
@dependabot
dependabot Bot requested a review from hbraswelrh August 10, 2026 01:05
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026
@dependabot
dependabot Bot requested a review from cdaniels255 August 10, 2026 01:05
@dependabot dependabot Bot added the go Pull requests that update go code label Aug 10, 2026
github-actions[bot]
github-actions Bot previously approved these changes Aug 10, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=224h.

@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/complytime/complypack v0.0.9
Release Age 224h Released 224 hours ago
Ownership third-party External dependency
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions

Copy link
Copy Markdown
Contributor

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/complytime/complypack-0.0.9 branch from 4a04692 to 95b5215 Compare August 10, 2026 08:02
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/complytime/complypack v0.0.9
Release Age 231h Released 231 hours ago
Ownership third-party External dependency
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=231h.

Bumps [github.com/complytime/complypack](https://github.com/complytime/complypack) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/complytime/complypack/releases)
- [Commits](complytime/complypack@v0.0.8...v0.0.9)

---
updated-dependencies:
- dependency-name: github.com/complytime/complypack
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/complytime/complypack-0.0.9 branch from 95b5215 to f76accb Compare August 12, 2026 21:44
@github-actions

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low github.com/complytime/complypack v0.0.9
Release Age 293h Released 293 hours ago
Ownership third-party External dependency
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=low, review=success, ownership=third-party, release_age=293h.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant