Skip to content

Conversation

@lucacome
Copy link

Proposed changes

Bumps golang.org/x/exp from v0.0.0-20230105000112-eab7a2c85304 to v0.0.0-20230522175609-2e198f4a06a1

Looks like dependabot wasn't picking up on this.

Bumps golang.org/x/exp from v0.0.0-20230105000112-eab7a2c85304 to v0.0.0-20230522175609-2e198f4a06a1

Looks like dependabot wasn't picking up on this.
@lucacome lucacome added this to the v3.2.0 milestone Jun 21, 2023
@lucacome lucacome requested a review from a team as a code owner June 21, 2023 06:46
@lucacome lucacome self-assigned this Jun 21, 2023
@github-actions
Copy link
Contributor

github-actions bot commented Jun 21, 2023

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

go.mod

PackageVersionLicenseIssue Type
golang.org/x/exp0.0.0-20230522175609-2e198f4a06a1NullUnknown License
Allowed Licenses: Apache-1.1, Apache-2.0, BSD-2-Clause, BSD-3-Clause, BSL-1.0, ISC, MIT, NCSA, OpenSSL, Python-2.0, X11

Scanned Manifest Files

go.mod

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Jun 21, 2023
@codecov
Copy link

codecov bot commented Jun 21, 2023

Codecov Report

Merging #4036 (9348c1a) into main (a9e451d) will increase coverage by 0.01%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #4036      +/-   ##
==========================================
+ Coverage   51.83%   51.84%   +0.01%     
==========================================
  Files          59       59              
  Lines       16705    16705              
==========================================
+ Hits         8659     8661       +2     
+ Misses       7747     7745       -2     
  Partials      299      299              

see 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@shaun-nx
Copy link
Contributor

@lucacome do we know why dependabot didn't catch this?

@jjngx
Copy link
Contributor

jjngx commented Jun 21, 2023

a link to the license: https://pkg.go.dev/golang.org/x/exp?tab=licenses

@lucacome
Copy link
Author

@shaun-nx it looks like sometimes dependabot has problems updating dependencies that don't have releases/tags

@lucacome lucacome merged commit 81a437f into main Jun 21, 2023
@lucacome lucacome deleted the deps/bump-exp branch June 21, 2023 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants