build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by dependabot[bot] · Pull Request #283 · wardnet/inforge

dependabot · 2026-08-22T15:35:24Z

Bumps github.com/stretchr/testify from 1.11.1 to 1.12.0.

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in stretchr/testify#1827

require: fix godoc generation for assertions returning a bool by @Baxromumarov in stretchr/testify#1850

docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in stretchr/testify#1821

docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in stretchr/testify#1842

EMERITUS.md: add @tylerb by @dolmen in stretchr/testify#1812

CI: test also with Go 1.24 by @alexandear in stretchr/testify#1856

deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in stretchr/testify#1823

CI: upgrade GitHub Actions and pin hashes by @SuperQ in stretchr/testify#1883

CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in stretchr/testify#1889

CI: add check of GitHub Action pinned hashes against tag by @dolmen in stretchr/testify#1885

_codegen: modernize by @dolmen in stretchr/testify#1890

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in stretchr/testify#1906

mock: Mock.Return does not exist anymore by @Kentzo in stretchr/testify#1905

New Contributors

@mutaiib made their first contribution in stretchr/testify#1775

@vyas-git made their first contribution in stretchr/testify#1665

@olivergondza made their first contribution in stretchr/testify#1400

@egawata made their first contribution in stretchr/testify#1792

@ubunatic made their first contribution in stretchr/testify#1815

@Baxromumarov made their first contribution in stretchr/testify#1850

@a2not made their first contribution in stretchr/testify#1821

... (truncated)

Commits

001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
d2699be _codegen: modernize
a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.11.1 to 1.12.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.0) --- updated-dependencies: - dependency-name: github.com/stretchr/testify dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-22T15:47:45Z

bulwark

❌ scan — 2 govulncheck findings

error output

… truncated to the last 20000 bytes — full log in the run artifact linked below …
inforge/inforge/internal/validate/security.go
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/validate/source.go
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/validate/validate.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/schemas
[gosec] 2026/08/22 15:45:20 Checking package: remote
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/remote/remote.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/internal/crowdsec
[gosec] 2026/08/22 15:45:20 Checking package: schemas
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/schemas/embed.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/internal/grafanaalert
[gosec] 2026/08/22 15:45:20 Checking package: types
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/types/types.go
[gosec] 2026/08/22 15:45:20 Checking package: crowdsec
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/install.go
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/paths.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/internal/tags
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/shell.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/program
[gosec] 2026/08/22 15:45:20 Checking package: tags
[gosec] 2026/08/22 15:45:20 Checking file: /home/runner/work/inforge/inforge/internal/tags/tags.go
[gosec] 2026/08/22 15:45:20 Import directory: /home/runner/work/inforge/inforge/internal/dbbackup
[gosec] 2026/08/22 15:45:21 Checking package: dbbackup
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/backup.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/deploy.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/install.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/paths.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/restore.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/shell.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/grant
[gosec] 2026/08/22 15:45:21 Checking package: grafanaalert
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/grafanaalert/builtin.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/grafanaalert/crowdsec.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/grafanaalert/grafanaalert.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/grafanaalert/service.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/meshcert
[gosec] 2026/08/22 15:45:21 Checking package: hetzner
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/compute.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/mesh.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/network.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/regions.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/storage.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/tls.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/meshnginx
[gosec] 2026/08/22 15:45:21 Checking package: meshcert
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/meshcert/meshcert.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/pki
[gosec] 2026/08/22 15:45:21 Checking package: meshnginx
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/egress.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/ingress.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/install.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/render.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/secretstore
[gosec] 2026/08/22 15:45:21 Checking package: pki
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/pki/leaf.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/pki/store.go
[gosec] 2026/08/22 15:45:21 Checking file: /home/runner/work/inforge/inforge/internal/pki/x509.go
[gosec] 2026/08/22 15:45:21 Import directory: /home/runner/work/inforge/inforge/internal/agehost
[gosec] 2026/08/22 15:45:22 Checking package: secretstore
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/age.go
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/store.go
[gosec] 2026/08/22 15:45:22 Import directory: /home/runner/work/inforge/inforge/internal/backupstore
[gosec] 2026/08/22 15:45:22 Checking package: agehost
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/agehost/agehost.go
[gosec] 2026/08/22 15:45:22 Import directory: /home/runner/work/inforge/inforge/internal/grafana
[gosec] 2026/08/22 15:45:22 Checking package: grafana
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/grafana/grafana.go
[gosec] 2026/08/22 15:45:22 Import directory: /home/runner/work/inforge/inforge/internal/manifest
[gosec] 2026/08/22 15:45:22 Checking package: grant
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/grant/database.go
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/grant/grant.go
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/grant/pki.go
[gosec] 2026/08/22 15:45:22 Import directory: /home/runner/work/inforge/inforge/internal/meshplan
[gosec] 2026/08/22 15:45:22 Checking package: backupstore
[gosec] 2026/08/22 15:45:22 Checking file: /home/runner/work/inforge/inforge/internal/backupstore/store.go
[gosec] 2026/08/22 15:45:22 Import directory: /home/runner/work/inforge/inforge/internal/r2
[gosec] 2026/08/22 15:45:23 Checking package: manifest
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/manifest/manifest.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/sizes
[gosec] 2026/08/22 15:45:23 Checking package: r2
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/r2/r2.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/yamldoc
[gosec] 2026/08/22 15:45:23 Checking package: sizes
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/sizes/sizes.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/app
[gosec] 2026/08/22 15:45:23 Checking package: meshplan
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/deploy.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/meshplan.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/cloudinit
[gosec] 2026/08/22 15:45:23 Checking package: yamldoc
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/dsl.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/env.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/yamldoc.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/meshpaths
[gosec] 2026/08/22 15:45:23 Checking package: cloudinit
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/cloudinit/cloudinit.go
[gosec] 2026/08/22 15:45:23 Checking package: meshpaths
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/meshpaths/meshpaths.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/otelcol
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/pgrole
[gosec] 2026/08/22 15:45:23 Checking package: otelcol
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/config.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/install.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/paths.go
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/shell.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/internal/regions
[gosec] 2026/08/22 15:45:23 Checking package: pgrole
[gosec] 2026/08/22 15:45:23 Checking file: /home/runner/work/inforge/inforge/internal/pgrole/pgrole.go
[gosec] 2026/08/22 15:45:23 Import directory: /home/runner/work/inforge/inforge/providers/cloudflare
[gosec] 2026/08/22 15:45:24 Checking package: regions
[gosec] 2026/08/22 15:45:24 Checking file: /home/runner/work/inforge/inforge/internal/regions/regions.go
[gosec] 2026/08/22 15:45:24 Checking package: app
[gosec] 2026/08/22 15:45:24 Checking file: /home/runner/work/inforge/inforge/internal/app/app.go
[gosec] 2026/08/22 15:45:26 Checking package: program
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/adr0042.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/dbbackup.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/dbcluster.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/dbdeploy.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/deploykey.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/encrypted.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/grafana.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/mesh.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/pkigrant.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/program.go
[gosec] 2026/08/22 15:45:26 Checking file: /home/runner/work/inforge/inforge/program/secretresolve.go
[gosec] 2026/08/22 15:45:27 Checking package: cloudflare
[gosec] 2026/08/22 15:45:27 Checking file: /home/runner/work/inforge/inforge/providers/cloudflare/dns.go
Results:


Summary:
  Gosec  : dev
  Files  : 138
  Lines  : 30867
  Nosec  : 44
  Issues : 0

go: downloading golang.org/x/vuln v1.7.0
go: downloading golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5
go: downloading golang.org/x/mod v0.39.0
go: downloading golang.org/x/tools v0.49.0
=== Symbol Results ===

Vulnerability #1: GO-2026-6214
    Path traversal via crafted reference names in github.com/go-git/go-git
  More info: https://pkg.go.dev/vuln/GO-2026-6214
  Module: github.com/go-git/go-git/v6
    Found in: github.com/go-git/go-git/v6@v6.0.0-alpha.4
    Fixed in: github.com/go-git/go-git/v6@v6.0.0-alpha.5
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.Ref
      #2: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.RemoveRef
      #3: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.SetRef

Vulnerability #2: GO-2026-6213
    Worktree operations may follow symlinks in github.com/go-git/go-git
  More info: https://pkg.go.dev/vuln/GO-2026-6213
  Module: github.com/go-git/go-git/v6
    Found in: github.com/go-git/go-git/v6@v6.0.0-alpha.4
    Fixed in: github.com/go-git/go-git/v6@v6.0.0-alpha.5
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls git.PlainCloneContext
      #2: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls git.Worktree.Checkout

Your code is affected by 2 vulnerabilities from 1 module.
This scan also found 0 vulnerabilities in packages you import and 4
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
creating virtual environment...
installing semgrep from spec 'semgrep==1.173.0'...
done! ✨ 🌟 ✨
  installed package semgrep 1.173.0, installed using Python 3.12.3
  These apps are now available
    - pysemgrep
    - semgrep
                  
                  
┌────────────────┐
│ Debugging Info │
└────────────────┘
                  
  SCAN ENVIRONMENT
  versions    - semgrep 1.173.0 on python 3.12.3                                       
  environment - running in environment github-actions, triggering event is pull_request
Fixing git state for github action pull request
Not on head ref: 7d0d4b8c7a3e79f6db760c3df12b3ec81063e559; checking that out now.
            
  CONNECTION
Using 14e31d47758f458047a5c9806a78b2754bc1bc8a as the merge-base of 14e31d47758f458047a5c9806a78b2754bc1bc8a and 7d0d4b8c7a3e79f6db760c3df12b3ec81063e559
  Initializing scan (deployment=wardnet, scan_id=214884048)  
  Enabled products: Code, Supply Chain                               
        
  ENGINE
Semgrep Pro Engine will be installed in /opt/pipx/venvs/semgrep/lib/python3.12/site-packages/semgrep/bin/semgrep-core-proprietary
Downloading... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 316.6/316.6 MB 394.2 MB/s 0:00:00
Successfully installed Semgrep Pro Engine (version 1.173.0)!

  Using git merge base detected from environment for diff scans: 14e31d47758f458047a5c9806a78b2754bc1bc8a
               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 2 files tracked by git with 2944 Code rules, 1391 Supply Chain rules:
            
            
  CODE RULES
  Scanning 2 files with 47 <multilang> rules.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       142             1391                                             
  website/yarn.lock    Skipped             Unknown     -                  -                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Basic            965                                                                                                  
  Reachability     406                                                                                                  
  Malicious         20                                                                                                  
                                                                                                                        
  Current version has 1 finding.

Creating git worktree from '14e31d47758f458047a5c9806a78b2754bc1bc8a' to scan baseline.
  Will report findings introduced by these commits (may be incomplete for shallow checkouts):
    * 7d0d4b8 build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0

               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 1 file tracked by git with 1 Supply Chain rule:
            
            
  CODE RULES
  No code rules to run.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       143                1                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Reachability       1                                                                                                  
                                                                                                                        
  Uploading scan results  
  Finalizing scan                         
                
┌──────────────┐
│ Scan Summary │
└──────────────┘
✅ CI scan completed successfully.
 • Findings: 0 (0 blocking)
 • Rules run: 112770
 • Targets scanned: 2
 • Parsed lines: ~100.0%
 • Scan skipped: 
   ◦ Matching --exclude patterns: 89
   ◦ Files matching .semgrepignore patterns: 123
 • Scan was limited to files changed since baseline commit.
 • For a detailed list of skipped files and lines, run semgrep with the --verbose flag
CI scan completed successfully.
  View results in Semgrep Cloud Platform:
    https://semgrep.dev/orgs/wardnet/findings?repo=wardnet/inforge&ref=refs/pull/283/merge
    https://semgrep.dev/orgs/wardnet/supply-chain/vulnerabilities?repo=wardnet/inforge&ref=refs/pull/283/merge
  No blocking findings so exiting with code 0
[PASS] gosec
[FAIL] govulncheck
[PASS] semgrep
Error: 1 check(s) failed
bulwark: 1 check(s) failed

✅ coverage — go: 66.8% (baseline 66.8%)

📦 Full bulwark output — complete scan and coverage logs.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 22, 2026

Navigation Menu

Uh oh!

build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 - #283

build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0#283
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/stretchr/testify-1.12.0

dependabot Bot commented on behalf of github Aug 22, 2026

Uh oh!

github-actions Bot commented Aug 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 22, 2026

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

Uh oh!

github-actions Bot commented Aug 22, 2026

bulwark

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants