Skip to content

Bump the go group across 1 directory with 3 updates - #3460

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-3fe944193d
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-3fe944193d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go group with 2 updates in the / directory: github.com/buger/jsonparser and github.com/jfrog/jfrog-cli-security.

Updates github.com/buger/jsonparser from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.2.0

What's Changed

Full Changelog: buger/jsonparser@v1.1.2...v1.2.0

Commits
  • c172c16 Merge pull request #269 from buger/tinygo
  • 680cd2e Merge pull request #281 from buger/reqproof-assurance-hardening
  • 9dce61c Migrate review storage from reviews/ folder to per-requirement timestamps
  • c03b9ef feat: add property-based obligation classes with 24 new SYS-REQs
  • 9c46110 chore: fix spec lint warnings — remove stale parent field, set review metadata
  • 8bbb8a8 Close coverage gaps: SYS-REQ-007/008/010 fuzz harness coverage to 100%
  • 552e93b Install Z3 via apt before audit
  • 98133b4 Remove manual Z3 pre-download, now handled by proof-action
  • 1b70ead Debug Z3 pre-download: remove output suppression
  • aac1fbc Pre-download Z3 solver before audit
  • Additional commits viewable in compare view

Updates github.com/jfrog/jfrog-cli-security from 1.27.0 to 1.28.0

Release notes

Sourced from github.com/jfrog/jfrog-cli-security's releases.

v1.28.0

What's Changed

Exciting New Features 🎉

Improvements 🌱

Bug Fixes 🛠

New Contributors

Full Changelog: jfrog/jfrog-cli-security@v1.27.1...v1.28.0

v1.27.1

What's Changed

Improvements 🌱

Bug Fixes 🛠

New Contributors

Full Changelog: jfrog/jfrog-cli-security@v1.27.0...v1.27.1

Commits
  • b3269a8 Add root dir to determine paths for sast changed files (#743)
  • 1ef672f BuildScan - Option to control showing Violations (#740)
  • a3f0211 XRAY-138687 - Implementing support for additional flags (#721)
  • a612025 Support 'Scanned - No Issues' severity (#722)
  • c44a8d5 Use Config Profile to determine if we should run SBOM (#742)
  • 89b2990 Fast sast mode using changed files (#739)
  • 6fe0a01 Add explicit GITHUB_TOKEN permissions to CLA workflow (#731)
  • 37d989b Add integration tests for UV and Pnpm (#732)
  • 1646a81 Warn on missing components parsing issue (#741)
  • 2efac75 Pass current Xray version to AM (#726)
  • Additional commits viewable in compare view

Updates github.com/jfrog/jfrog-client-go from 1.55.1-0.20260423072450-00abbb525a84 to 1.55.1-0.20260428070955-750b933dc5c7

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 2 updates in the / directory: [github.com/buger/jsonparser](https://github.com/buger/jsonparser) and [github.com/jfrog/jfrog-cli-security](https://github.com/jfrog/jfrog-cli-security).


Updates `github.com/buger/jsonparser` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/buger/jsonparser/releases)
- [Commits](buger/jsonparser@v1.1.2...v1.2.0)

Updates `github.com/jfrog/jfrog-cli-security` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/jfrog/jfrog-cli-security/releases)
- [Commits](jfrog/jfrog-cli-security@v1.27.0...v1.28.0)

Updates `github.com/jfrog/jfrog-client-go` from 1.55.1-0.20260423072450-00abbb525a84 to 1.55.1-0.20260428070955-750b933dc5c7
- [Release notes](https://github.com/jfrog/jfrog-client-go/releases)
- [Commits](https://github.com/jfrog/jfrog-client-go/commits)

---
updated-dependencies:
- dependency-name: github.com/buger/jsonparser
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/jfrog/jfrog-cli-security
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/jfrog/jfrog-client-go
  dependency-version: 1.55.1-0.20260428070955-750b933dc5c7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 29, 2026
@ehl-jf ehl-jf added the ignore for release Automatically generated release notes label Apr 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 29, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-3fe944193d branch April 29, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code ignore for release Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant