Bump github.com/bazelbuild/rules_go from 0.58.3 to 0.59.0 #2407

Merged

dependabot[bot] merged 1 commit from refs/pull/2407/head into main 2025-11-20 03:44:45 +00:00

Conversation 1 Commits 1 Files changed 3 +4 -4

dependabot[bot] commented 2025-11-10 02:16:43 +00:00 (Migrated from github.com)

Owner

Copy link

Imported from GitHub pull request.

Original GitHub pull request: #1931
Original author: @dependabot[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1931
Original created: 2025-11-10T02:16:43Z
Original updated: 2025-11-20T03:45:02Z
Original head: carverauto/serviceradar:dependabot/go_modules/github.com/bazelbuild/rules_go-0.59.0
Original base: main
Original merged: 2025-11-20T03:44:45Z by @mfreeman451

Bumps github.com/bazelbuild/rules_go from 0.58.3 to 0.59.0.

Release notes

Sourced from github.com/bazelbuild/rules_go's releases.

v0.59.0

WORKSPACE code

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(

name = "io_bazel_rules_go",

sha256 = "68af54cb97fbdee5e5e8fe8d210d15a518f9d62abfd71620c3eaff3b26a5ff86",

urls = [

"https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip",

"https://github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip",

],

)
load("@​io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")
go_rules_dependencies()
go_register_toolchains(version = "1.25.4")
Create the host platform repository transitively required by rules_go.
load("@​bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")

load("@platforms//host:extension.bzl", "host_platform_repo")
maybe(

host_platform_repo,

name = "host_platform",

)

What's Changed

• Reland "go_sdk: store SDK filenames and hashes in lockfile facts" by @​fmeum in bazel-contrib/rules_go#4493
• correct macOS Tahoe 26 build via apple_support by @​jmhodges in bazel-contrib/rules_go#4500
• remove .vscode and gitignore it by @​jmhodges in bazel-contrib/rules_go#4498
• Fix BCR test module for Bazel 9 by @​fmeum in bazel-contrib/rules_go#4503
• docs: copy editor setup instructions from wiki to docs/editors.md by @​jayconrod in bazel-contrib/rules_go#4504
• Add riscv64 into BAZEL_GOARCH_CONSTRAINTS by @​ffgan in bazel-contrib/rules_go#4507
• Add missing load statements by @​keith in bazel-contrib/rules_go#4508

New Contributors

• @​ffgan made their first contribution in bazel-contrib/rules_go#4507

Full Changelog: https://github.com/bazel-contrib/rules_go/compare/v0.58.3...v0.59.0

Commits

• b3e12d7 Add missing load statements (#4508)
• 3fe89b8 Add riscv64 into BAZEL_GOARCH_CONSTRAINTS (#4507)
• 0b46a62 docs: copy editor setup instructions from wiki to docs/editors.md (#4504)
• dfed61b Fix BCR test module for Bazel 9 (#4503)
• cdf4651 remove .vscode and gitignore it (#4498)
• b764503 correct macOS Tahoe 26 build via apple_support (#4500)
• 30a6f8d Reland "go_sdk: store SDK filenames and hashes in lockfile facts" (#4493)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Imported from GitHub pull request. Original GitHub pull request: #1931 Original author: @dependabot[bot] Original URL: https://github.com/carverauto/serviceradar/pull/1931 Original created: 2025-11-10T02:16:43Z Original updated: 2025-11-20T03:45:02Z Original head: carverauto/serviceradar:dependabot/go_modules/github.com/bazelbuild/rules_go-0.59.0 Original base: main Original merged: 2025-11-20T03:44:45Z by @mfreeman451 --- Bumps [github.com/bazelbuild/rules_go](https://github.com/bazelbuild/rules_go) from 0.58.3 to 0.59.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bazelbuild/rules_go/releases">github.com/bazelbuild/rules_go's releases</a>.</em></p> <blockquote> <h2>v0.59.0</h2> <h2><code>WORKSPACE</code> code</h2> <pre><code>load(&quot;@bazel_tools//tools/build_defs/repo:http.bzl&quot;, &quot;http_archive&quot;) <p>http_archive(<br /> name = &quot;io_bazel_rules_go&quot;,<br /> sha256 = &quot;68af54cb97fbdee5e5e8fe8d210d15a518f9d62abfd71620c3eaff3b26a5ff86&quot;,<br /> urls = [<br /> &quot;https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip&quot;,<br /> &quot;https://github.com/bazel-contrib/rules_go/releases/download/v0.59.0/rules_go-v0.59.0.zip&quot;,<br /> ],<br /> )</p> <p>load(&quot;<a href="https://github.com/io"><code>@​io</code></a>_bazel_rules_go//go:deps.bzl&quot;, &quot;go_register_toolchains&quot;, &quot;go_rules_dependencies&quot;)</p> <p>go_rules_dependencies()</p> <p>go_register_toolchains(version = &quot;1.25.4&quot;)</p> <h1>Create the host platform repository transitively required by rules_go.</h1> <p>load(&quot;<a href="https://github.com/bazel"><code>@​bazel</code></a>_tools//tools/build_defs/repo:utils.bzl&quot;, &quot;maybe&quot;)<br /> load(&quot;@platforms//host:extension.bzl&quot;, &quot;host_platform_repo&quot;)</p> <p>maybe(<br /> host_platform_repo,<br /> name = &quot;host_platform&quot;,<br /> )</p> <p></code></pre></p> <h2>What's Changed</h2> <ul> <li>Reland &quot;go_sdk: store SDK filenames and hashes in lockfile facts&quot; by <a href="https://github.com/fmeum"><code>@​fmeum</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4493">bazel-contrib/rules_go#4493</a></li> <li>correct macOS Tahoe 26 build via apple_support by <a href="https://github.com/jmhodges"><code>@​jmhodges</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4500">bazel-contrib/rules_go#4500</a></li> <li>remove .vscode and gitignore it by <a href="https://github.com/jmhodges"><code>@​jmhodges</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4498">bazel-contrib/rules_go#4498</a></li> <li>Fix BCR test module for Bazel 9 by <a href="https://github.com/fmeum"><code>@​fmeum</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4503">bazel-contrib/rules_go#4503</a></li> <li>docs: copy editor setup instructions from wiki to docs/editors.md by <a href="https://github.com/jayconrod"><code>@​jayconrod</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4504">bazel-contrib/rules_go#4504</a></li> <li>Add <code>riscv64</code> into <code>BAZEL_GOARCH_CONSTRAINTS</code> by <a href="https://github.com/ffgan"><code>@​ffgan</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4507">bazel-contrib/rules_go#4507</a></li> <li>Add missing load statements by <a href="https://github.com/keith"><code>@​keith</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4508">bazel-contrib/rules_go#4508</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ffgan"><code>@​ffgan</code></a> made their first contribution in <a href="https://redirect.github.com/bazel-contrib/rules_go/pull/4507">bazel-contrib/rules_go#4507</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/bazel-contrib/rules_go/compare/v0.58.3...v0.59.0">https://github.com/bazel-contrib/rules_go/compare/v0.58.3...v0.59.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bazel-contrib/rules_go/commit/b3e12d797150cdc36f27e72f52f6a5c752762641"><code>b3e12d7</code></a> Add missing load statements (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4508">#4508</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/3fe89b8093e47f2edc81d69f8655c2717db6bc5c"><code>3fe89b8</code></a> Add <code>riscv64</code> into <code>BAZEL_GOARCH_CONSTRAINTS</code> (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4507">#4507</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/0b46a620434f253eeff973a9ab22fc58a8c8efe2"><code>0b46a62</code></a> docs: copy editor setup instructions from wiki to docs/editors.md (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4504">#4504</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/dfed61bf442bf1e331a76536bc773e67c27519eb"><code>dfed61b</code></a> Fix BCR test module for Bazel 9 (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4503">#4503</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/cdf4651b4d8c34a4cb2c91939d8ef6b7130cd3c9"><code>cdf4651</code></a> remove .vscode and gitignore it (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4498">#4498</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/b764503a883be0fc0738f64fb6c6d4d07b59fb9c"><code>b764503</code></a> correct macOS Tahoe 26 build via apple_support (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4500">#4500</a>)</li> <li><a href="https://github.com/bazel-contrib/rules_go/commit/30a6f8da464b461446b376c9b7f7e78111772024"><code>30a6f8d</code></a> Reland &quot;go_sdk: store SDK filenames and hashes in lockfile facts&quot; (<a href="https://redirect.github.com/bazelbuild/rules_go/issues/4493">#4493</a>)</li> <li>See full diff in <a href="https://github.com/bazelbuild/rules_go/compare/v0.58.3...v0.59.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

qodo-code-review[bot] commented 2025-11-20 03:45:02 +00:00 (Migrated from github.com)

Author

Owner

Copy link

Imported GitHub PR comment.

Original author: @qodo-code-review[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1931#issuecomment-3555638547
Original created: 2025-11-20T03:45:02Z

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
⚪	Codebase context is not defined Follow the guide to enable codebase context checks.
Custom Compliance
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: No runtime code: The PR only updates dependency versions and does not add or modify application logic that could affect audit trails, so compliance cannot be assessed from the diff. Referred Code github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: No identifiers: The diff only changes dependency versions and contains no new identifiers to evaluate for naming quality. Referred Code github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: No error paths: No new executable code was added in this PR from which error handling practices can be evaluated. Referred Code github.com/bazelbuild/rules_go v0.59.0 h1:RLhOwYIqeMgBpKelHEWTfIPjA37so3oa/rX+/qqq/P4= github.com/bazelbuild/rules_go v0.59.0/go.mod h1:Pn30cb4M513fe2rQ6GiJ3q8QyrRsgC7zhuDvi50Lw4Y= github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw= Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: Not applicable: The changes are limited to dependency version bumps and do not introduce user-facing error messages to assess. Referred Code github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: No logging code: There is no new logging introduced in this diff, so log structure and data sensitivity cannot be evaluated. Referred Code github.com/bazelbuild/rules_go v0.59.0 h1:RLhOwYIqeMgBpKelHEWTfIPjA37so3oa/rX+/qqq/P4= github.com/bazelbuild/rules_go v0.59.0/go.mod h1:Pn30cb4M513fe2rQ6GiJ3q8QyrRsgC7zhuDvi50Lw4Y= github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw= Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: Dependency bump: Only dependency versions were updated; no input handling or data processing code was added or modified to review for security controls. Referred Code github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 Learn more about managing compliance generic rules or creating your own custom rules

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

Imported GitHub PR comment. Original author: @qodo-code-review[bot] Original URL: https://github.com/carverauto/serviceradar/pull/1931#issuecomment-3555638547 Original created: 2025-11-20T03:45:02Z --- ## PR Compliance Guide 🔍 <!-- https://github.com/carverauto/serviceradar/commit/f880ce6a8b55f255989a3005e3720b45d31e6eb6 --> Below is a summary of compliance checks for this PR:<br> <table><tbody><tr><td colspan='2'><strong>Security Compliance</strong></td></tr> <tr><td>🟢</td><td><details><summary><strong>No security concerns identified</strong></summary> No security vulnerabilities detected by AI analysis. Human verification advised for critical code. </details></td></tr> <tr><td colspan='2'><strong>Ticket Compliance</strong></td></tr> <tr><td>⚪</td><td><details><summary>🎫 <strong>No ticket provided </strong></summary> - [ ] Create ticket/issue <!-- /create_ticket --create_ticket=true --> </details></td></tr> <tr><td colspan='2'><strong>Codebase Duplication Compliance</strong></td></tr> <tr><td>⚪</td><td><details><summary><strong>Codebase context is not defined </strong></summary> Follow the <a href='https://qodo-merge-docs.qodo.ai/core-abilities/rag_context_enrichment/'>guide</a> to enable codebase context checks. </details></td></tr> <tr><td colspan='2'><strong>Custom Compliance</strong></td></tr> <tr><td rowspan=6>⚪</td> <td><details> <summary><strong>Generic: Comprehensive Audit Trails</strong></summary><br> **Objective:** To create a detailed and reliable record of critical system actions for security analysis <br>and compliance.<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R7-R7'><strong>No runtime code</strong></a>: The PR only updates dependency versions and does not add or modify application logic that <br>could affect audit trails, so compliance cannot be assessed from the diff.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary><strong>Generic: Meaningful Naming and Self-Documenting Code</strong></summary><br> **Objective:** Ensure all identifiers clearly express their purpose and intent, making code <br>self-documenting<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R7-R7'><strong>No identifiers</strong></a>: The diff only changes dependency versions and contains no new identifiers to evaluate for <br>naming quality.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary><strong>Generic: Robust Error Handling and Edge Case Management</strong></summary><br> **Objective:** Ensure comprehensive error handling that provides meaningful context and graceful <br>degradation<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-3295df7234525439d778f1b282d146a4f1ff6b415248aaac074e8042d9f42d63R13-R16'><strong>No error paths</strong></a>: No new executable code was added in this PR from which error handling practices can be <br>evaluated.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 h1:RLhOwYIqeMgBpKelHEWTfIPjA37so3oa/rX+/qqq/P4= github.com/bazelbuild/rules_go v0.59.0/go.mod h1:Pn30cb4M513fe2rQ6GiJ3q8QyrRsgC7zhuDvi50Lw4Y= github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw= ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary><strong>Generic: Secure Error Handling</strong></summary><br> **Objective:** To prevent the leakage of sensitive system information through error messages while <br>providing sufficient detail for internal debugging.<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R7-R7'><strong>Not applicable</strong></a>: The changes are limited to dependency version bumps and do not introduce user-facing error <br>messages to assess.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary><strong>Generic: Secure Logging Practices</strong></summary><br> **Objective:** To ensure logs are useful for debugging and auditing without exposing sensitive <br>information like PII, PHI, or cardholder data.<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-3295df7234525439d778f1b282d146a4f1ff6b415248aaac074e8042d9f42d63R13-R16'><strong>No logging code</strong></a>: There is no new logging introduced in this diff, so log structure and data sensitivity <br>cannot be evaluated.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 h1:RLhOwYIqeMgBpKelHEWTfIPjA37so3oa/rX+/qqq/P4= github.com/bazelbuild/rules_go v0.59.0/go.mod h1:Pn30cb4M513fe2rQ6GiJ3q8QyrRsgC7zhuDvi50Lw4Y= github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw= ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary><strong>Generic: Security-First Input Validation and Data Handling</strong></summary><br> **Objective:** Ensure all data inputs are validated, sanitized, and handled securely to prevent <br>vulnerabilities<br> **Status:** <br><a href='https://github.com/carverauto/serviceradar/pull/1931/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R7-R7'><strong>Dependency bump</strong></a>: Only dependency versions were updated; no input handling or data processing code was added <br>or modified to review for security controls.<br> <details open><summary>Referred Code</summary> ```txt github.com/bazelbuild/rules_go v0.59.0 github.com/cenkalti/backoff/v5 v5.0.3 ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td align="center" colspan="2"> <!-- placeholder --> <!-- /compliance --update_compliance=true --> </td></tr></tbody></table> <details><summary>Compliance status legend</summary> 🟢 - Fully Compliant<br> 🟡 - Partial Compliant<br> 🔴 - Not Compliant<br> ⚪ - Requires Further Human Verification<br> 🏷️ - Compliance label<br> </details>

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

1week

  

2weeks

  

Failed compliance check

  

IP cameras

  

NATS

NATS JetStream

  

Possible security concern

  

Review effort 1/5

  

Review effort 2/5

  

Review effort 3/5

  

Review effort 4/5

  

Review effort 5/5

  

UI

  

aardvark

  

accessibility

  

amd64

  

api

  

arm64

  

auth

  

back-end

  

bgp

  

blog

  

bug

Something isn't working

  

build

  

checkers

  

ci-cd

continuous integration-continuous deployments

  

cleanup

  

cnpg

cloud-native postgres

  

codex

  

core

core service

  

dependencies

Pull requests that update a dependency file

  

device-management

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

dusk

  

ebpf

  

enhancement

New feature or request

  

eta 1d

  

eta 1hr

  

eta 3d

  

eta 3hr

  

feature

  

fieldsurvey

  

github_actions

Pull requests that update GitHub Actions code

  

go

Pull requests that update Go code

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

javascript

Pull requests that update Javascript code

  

k8s

  

log-collector

  

mapper

  

mtr

multi traceroute

  

needs-triage

  

netflow

  

network-sweep

  

observability

  

oracle

Oracle Linux related issues

  

otel

opentelemetry logs, traces, metrics

  

plug-in

  

proton

timeplus proton streaming database

  

python

  

question

Further information is requested

  

reddit

  

redhat

  

research

  

rperf

  

rperf-checker

  

rust

Pull requests that update rust code

  

sdk

  

security

  

serviceradar-agent

  

serviceradar-agent-gateway

  

serviceradar-web

  

serviceradar-web-ng

  

siem

  

snmp

  

sysmon

  

topology

  

ubiquiti

  

wasm

  

wontfix

This will not be worked on

  

zen-engine

No labels

1week

2weeks

Failed compliance check

IP cameras

NATS

Possible security concern

Review effort 1/5

Review effort 2/5

Review effort 3/5

Review effort 4/5

Review effort 5/5

UI

aardvark

accessibility

amd64

api

arm64

auth

back-end

bgp

blog

bug

build

checkers

ci-cd

cleanup

cnpg

codex

core

dependencies

device-management

documentation

duplicate

dusk

ebpf

enhancement

eta 1d

eta 1hr

eta 3d

eta 3hr

feature

fieldsurvey

github_actions

go

good first issue

help wanted

invalid

javascript

k8s

log-collector

mapper

mtr

needs-triage

netflow

network-sweep

observability

oracle

otel

plug-in

proton

python

question

reddit

redhat

research

rperf

rperf-checker

rust

sdk

security

serviceradar-agent

serviceradar-agent-gateway

serviceradar-web

serviceradar-web-ng

siem

snmp

sysmon

topology

ubiquiti

wasm

wontfix

zen-engine

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

carverauto/serviceradar!2407

No description provided.