fix(deps): update tool deps to v2 (major) #723
+2
−2
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.64.5
->v2.1.6
v1.9.2
->v2.0.2
Release Notes
golangci/golangci-lint (github.com/golangci/golangci-lint)
v2.1.6
Compare Source
godot
: from 1.5.0 to 1.5.1musttag
: from 0.13.0 to 0.13.1v2.1.5
Compare Source
Due to an error related to Snapcraft, some artifacts of the v2.1.4 release have not been published.
This release contains the same things as v2.1.3.
v2.1.4
Compare Source
Due to an error related to Snapcraft, some artifacts of the v2.1.3 release have not been published.
This release contains the same things as v2.1.3.
v2.1.3
Compare Source
fatcontext
: from 0.7.2 to 0.8.0nakedret.max-func-lines: 0
staticcheck
settingsgo.mod
hash to the cache saltv2.1.2
Compare Source
exptostd
: from 0.4.2 to 0.4.3gofumpt
: from 0.7.0 to 0.8.0protogetter
: from 0.3.13 to 0.3.15usetesting
: from 0.4.2 to 0.4.3v2.1.1
Compare Source
The release process of v2.1.0 failed due to a regression inside goreleaser.
The binaries of v2.1.0 have been published, but not the other artifacts (AUR, Docker, etc.).
v2.1.0
Compare Source
--path-mode=abs
)${config-path}
)warn-unused
option forfmt
commandfmt
command (golangci-lint fmt --diff-colored
)funcorder
linter https://github.com/manuelarte/funcordergo-errorlint
: from 1.7.1 to 1.8.0 (automatic error comparison and type assertion fixes)goconst
:ignore-strings
is deprecated and replaced byignore-string-values
goconst
: from 1.7.1 to 1.8.1 (new options:find-duplicates
,eval-const-expressions
)govet
: addhttpmux
analyzernilnesserr
: from 0.1.2 to 0.2.0 (detect more cases)paralleltest
: from 1.0.10 to 1.0.14 (checks only_test.go
files)revive
: from 1.7.0 to 1.9.0 (support kebab case for setting names)sloglint
: from 0.9.0 to 0.11.0 (autofix, new optionmsg-style
, suggestslog.DiscardHandler
)wrapcheck
: from 2.10.0 to 2.11.0 (new optionreport-internal-errors
)wsl
: from 4.6.0 to 4.7.0 (cgo files are always excluded)fatcontext
: from 0.7.1 to 0.7.2gocritic
: fiximportshadow
checkergosec
: from 2.22.2 to 2.22.3ireturn
: from 0.3.1 to 0.4.0loggercheck
: from 0.10.1 to 0.11.0nakedret
: from 2.0.5 to 2.0.6nonamedreturns
: from 1.0.5 to 1.0.6protogetter
: from 0.3.12 to 0.3.13testifylint
: from 1.6.0 to 1.6.1unconvert
: update to HEADgolangci-lint-fmt
pre-commit hookv2.0.2
Compare Source
source
optionv2.0.1
Compare Source
golines
: fix settings during linter loadversion
field before the configurationforbidigo
: fix migrationv2.0.0
Compare Source
golangci-lint fmt
command with dedicated formatter configurationgolangci-lint migrate
command to help migration from v1 to v2 (cf. Migration guide)run.relative-path-mode
(cf. Migration guide)--fast-only
flag (cf. Migration guide)linters.exclusions.warn-unused
to log a warning if an exclusion rule is unused.golines
formatter https://github.com/segmentio/golinesstaticcheck
,stylecheck
,gosimple
into one linter (staticcheck
) (cf. Migration guide)go-critic
: from 0.12.0 to 0.13.0gomodguard
: from 1.3.5 to 1.4.1 (block explicit indirect dependencies)nilnil
: from 1.0.1 to 1.1.0 (new option:only-two
)perfsprint
: from 0.8.2 to 0.9.1 (checker name in the diagnostic message)staticcheck
: newquickfix
set of rulestestifylint
: from 1.5.2 to 1.6.0 (new options:equal-values
,suite-method-signature
,require-string-msg
)wsl
: from 4.5.0 to 4.6.0 (new option:allow-cuddle-used-in-block
)bidichk
: from 0.3.2 to 0.3.3errchkjson
: from 0.4.0 to 0.4.1errname
: from 1.0.0 to 1.1.0funlen
: fixignore-comments
optiongci
: from 0.13.5 to 0.13.6gosmopolitan
: from 1.2.2 to 1.3.0inamedparam
: from 0.1.3 to 0.2.0intrange
: from 0.3.0 to 0.3.1protogetter
: from 0.3.9 to 0.3.12unparam
: from8a5130c
to0df0534
golangci-lint config path --json
golangci-lint help linters --json
golangci-lint help formatters --json
golangci-lint linters --json
golangci-lint formatters --json
golangci-lint version --json
v1.64.8
Compare Source
v1.64.7
Compare Source
depguard
: from 2.2.0 to 2.2.1dupl
: from3e9179a
tof665c8d
gosec
: from 2.22.1 to 2.22.2staticcheck
: from 0.6.0 to 0.6.1v1.64.6
Compare Source
asciicheck
: from 0.4.0 to 0.4.1contextcheck
: from 1.1.5 to 1.1.6errcheck
: from 1.8.0 to 1.9.0exptostd
: from 0.4.1 to 0.4.2ginkgolinter
: from 0.19.0 to 0.19.1go-exhaustruct
: from 3.3.0 to 3.3.1gocheckcompilerdirectives
: from 1.2.1 to 1.3.0godot
: from 1.4.20 to 1.5.0perfsprint
: from 0.8.1 to 0.8.2revive
: from 1.6.1 to 1.7.0tagalign
: from 1.4.1 to 1.4.2google/osv-scanner (github.com/google/osv-scanner)
v2.0.2
Compare Source
Fixes:
tool
directive (Go 1.24+) ingo.mod
files would fail. The scanner image has been updated to use a newer Go version.v2.0.1
Compare Source
Features:
packages.config
andpackages.lock.json
files.Fixes:
Docs:
API Changes:
v2.0.0
Compare Source
This release merges the improvements, features, and fixes from v2.0.0-rc1, v2.0.0-beta2, and v2.0.0-beta1.
Important: This release includes several breaking changes aimed at future-proofing OSV-Scanner. Please consult our comprehensive Migration Guide to ensure a smooth upgrade.
Features:
deps.dev
.osv-scanner scan image <image-name>:<tag>
osv-scanner scan --serve ...
override
remediation strategy.pom.xml
and parent POM files.osv-scalibr
:cabal.project.freeze
,stack.yaml.lock
deps.json
uv.lock
node_module
s, Python wheels, Java uber jars, Go binariesosv-scanner update
command for updating the local vulnerability database (formerly experimental).bun.lock
lockfiles.scan image
command.--serve
using the new--port
flag.Breaking Changes:
--interactive
flag for interactive mode.--verbosity=verbose
verbosity level.--license
flag.reporter
removed; logging now usesslog
, which can be overridden.lockfile
(migrated toOSV-Scalibr
).Improvements:
Fixes:
bom.xml
filename.We encourage everyone to upgrade to OSV-Scanner v2.0.0 and experience these powerful new capabilities! As always, your feedback is invaluable, so please don't hesitate to share your thoughts and suggestions.
Configuration
📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.