Skip to content

chore(deps): update golang/govulncheck-action action to v1.1.0 (.github/workflows)#2447

Merged
mromaszewicz merged 1 commit into
mainfrom
renovate/github/workflows/golang-govulncheck-action-1.x
Jul 10, 2026
Merged

chore(deps): update golang/govulncheck-action action to v1.1.0 (.github/workflows)#2447
mromaszewicz merged 1 commit into
mainfrom
renovate/github/workflows/golang-govulncheck-action-1.x

Conversation

@renovate

@renovate renovate Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
golang/govulncheck-action action minor v1.0.4v1.1.0

Release Notes

golang/govulncheck-action (golang/govulncheck-action)

v1.1.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 10, 2026 13:10
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 10, 2026
@greptile-apps

greptile-apps Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Automated dependency update bumping the golang/govulncheck-action GitHub Action from v1.0.4 to v1.1.0 in the vulnerability scanning workflow.

  • Updates both the version tag and the pinned commit SHA (b625fbe...032d455...), which is the correct and secure way to reference a GitHub Action.
  • No logic, configuration, or code changes are included; the workflow behaviour is otherwise unchanged.

Confidence Score: 5/5

Safe to merge — a one-line Action version bump with no changes to workflow logic or permissions.

The change updates the pinned commit SHA alongside the version tag, following best practices for reproducible and tamper-resistant CI. There are no changes to workflow steps, permissions, secrets usage, or job configuration.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/govulncheck.yml Minor version bump of golang/govulncheck-action from v1.0.4 to v1.1.0, with the pinned commit SHA updated accordingly.

Reviews (1): Last reviewed commit: "chore(deps): update golang/govulncheck-a..." | Re-trigger Greptile

@mromaszewicz
mromaszewicz merged commit f8c5022 into main Jul 10, 2026
29 checks passed
@mromaszewicz
mromaszewicz deleted the renovate/github/workflows/golang-govulncheck-action-1.x branch July 10, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant