stacklok / frizbee / 31756817394
52%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 15
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 53.601%. Remained the same
31756817394

push

github

web-flow 
chore(deps): batch all pending dependency updates and fix CI (#444)

* chore(deps): batch all pending dependency updates and fix CI

Folds every open Dependabot/Renovate PR into a single change, repairs the
two unrelated CI failures that were blocking them, and reconfigures both
bots so future updates arrive grouped instead of one PR per dependency.

Go modules:
  * github.com/google/go-containerregistry v0.21.5 -> v0.21.9
  * github.com/moby/buildkit             v0.29.0 -> v0.32.2
  * github.com/go-git/go-billy/v5        v5.8.0  -> v5.9.1  (security)
  * golang.org/x/sync                    v0.20.0 -> v0.22.0
  * go.mongodb.org/mongo-driver          v1.17.6 -> v1.17.7

buildkit v0.32.2 requires Go 1.26.3, so the go directive moves up
accordingly. It also pulls an unreleased protobuf pseudo-version, which is
pinned forward to the released v1.36.12.

GitHub Actions:
  * actions/checkout              v6      -> v7
  * actions/setup-go              v6.4.0  -> v6.5.0
  * coverallsapp/github-action    v2.3.6  -> v2.3.8
  * github/codeql-action          v4      -> v4.36.1
  * golangci/golangci-lint-action v9      -> v9.2.1
  * goreleaser/goreleaser-action  v7      -> v7.2.2
  * sigstore/cosign-installer     v4.1.1  -> v4.1.2

CI fixes:
  * test: TestReplacer_ParseGitHubActionsInFile resolves actions/checkout
    against the live GitHub API and asserted the SHA behind the floating
    "v2" major tag. Upstream moved that tag, so the test broke. Pinned the
    fixtures to the immutable v2.7.0 tag, which is the SHA the test always
    meant.
  * lint: golangci-lint v9 runs goconst over _test.go files, surfacing 25
    pre-existing "make it a constant" hits in table-driven tests. Enabled
    goconst.ignore-tests -- repeated literals in test tables are idiomatic.

Dependency bots:
  * Dependabot now batches minor/patch updates into one PR per ecosystem
    (Go modules, GitHub Actions), with security updates in their own group.
    Majors stay ungrouped so a break... (continued)

655 of 1222 relevant lines covered (53.6%)

0.6 hits per line

Jobs
ID Job ID Ran Files Coverage
1 31756817394.1 15
53.6
 GitHub Action Run
Source Files on build 31756817394