Skip to content

chore(deps): update golang.org/x/vuln v1.2.0 → v1.3.0#28232

Merged
pelikhan merged 2 commits intomainfrom
copilot/update-golang-org-x-vuln-v1-3-0
Apr 24, 2026
Merged

chore(deps): update golang.org/x/vuln v1.2.0 → v1.3.0#28232
pelikhan merged 2 commits intomainfrom
copilot/update-golang-org-x-vuln-v1-3-0

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 24, 2026

Bumps the Go vulnerability scanning tool (govulncheck) to v1.3.0. This minor update may include updated vuln database integration and new scanner behavior.

Changes

  • go.mod: golang.org/x/vuln v1.2.0 → v1.3.0
  • go.sum: updated checksums; golang.org/x/telemetry pulled to a newer snapshot as a transitive dependency

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name 64/pkg/tool/linux_amd64/compile GOINSECURE boring/bbig ache/go/1.25.8/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/agent-persona-explorer.md 64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh repo view owner/repo env 990622104 vNkW/MmwpPo_3e3tB-Au8vNkW 64/pkg/tool/linux_amd64/link GOINSECURE l/ascii GOMODCACHE 64/pkg/tool/linux_amd64/link -c ger.test -ZkR/Y5KUpR6ZrQZn8hJV-ZkR ortcfg.link -n1 b/gh-aw/pkg/actirun --end-of-optionsdownload 9Ym34G_sfJyM6o-I12345 (http block)
    • Triggering command: /usr/bin/gh gh repo view owner/repo env 990622104 .cfg .cfg GOINSECURE contextprotocol/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-test.v=true estl�� 3242448/b395/_pkg_.a log ache/go/1.25.8/x64/pkg/tool/linu-test.short=true -n1 --format=format:-1 --end-of-optionsxterm-color ache/go/1.25.8/x64/pkg/tool/linustatus (http block)
  • https://api.github.com/orgs/test-owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json age/common.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name xterm-color tions/setup/js/nmain me: String!) { -lang=go1.25 -m eb510a34..HEAD k/gh-aw/gh-aw/ac--noprofile infocmp -1 ithub/workflows git er: String!, $na-importcfg -m st/suppress-warn-atomic modules/@npmcli/-bool infocmp (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv test/race-image:v1.0.0 64/pkg/tool/linux_amd64/vet /usr/bin/git 3958751/b048/_pkgit .cfg 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git 3958751/b040/impnode 3NxN/fOrMapTM_St/opt/hostedtoolcache/node/24.14.1/x64/bin/npm ache/go/1.25.8/xinstall git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git LsRemoteWithRealgit LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/cgo /usr/bin/git 17161672/001 config 64/pkg/tool/linuinstall git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE x_amd64/vet node /tmp�� /tmp/TestHashStability_SameInputSameOutput2140633837/001/stability-test.md x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /tmp/compile-all-instructions-test-193473047 show /usr/bin/gh k/gh-aw/gh-aw/.ggit herFiles,CFiles,rev-parse /usr/bin/git gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv se 3242448/b189/vetnonexistent-workflow-test-12345 ache/go/1.25.8/x--limit -p bytes -lang=go1.25 ache/go/1.25.8/x--name-only -o st-3946814672/.github/workflows -trimpath /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu-nilfunc -p vendor/golang.orrev-parse -lang=go1.25 /opt/hostedtoolcache/go/1.25.8/xTest User (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel -tests /usr/bin/git plorer.md efaultBranchFrom\n .cfg git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-trimpath /usr/bin/git se 3242448/b245/vetrev-parse ache/go/1.25.8/x--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestParseDegit /tmp/TestParseDerev-parse 1/x64/bin/node git rev-�� --show-toplevel git /usr/bin/git ithub/workflows/git x_amd64/asm /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_only_defaults_repo309695455/001 remote /usr/bin/gh -json GO111MODULE x_amd64/compile gh api /repos/actions/github-script/git/ref/tags/v9 --jq /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE x_amd64/vet node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git 1852200841 3242448/b070/_tecommit /opt/hostedtoolc-m git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuremote.origin.url /usr/bin/git -unreachable=falgit (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v9
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json ag.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /opt/hostedtoolcache/node/24.14.1/x64/bin/node tmatter-with-envgit vZBL1k16k 64/pkg/tool/linu--show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� Safe: ${{ github.actor }}, Unsafe: ${{ secrets.TOKEN }} ch/8p_7IHIf_31YR46MaExS/rs4ruDNpeWLgO0QAw_ap /usr/bin/gh ortcfg GO111MODULE 64/pkg/tool/linu--show-toplevel gh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ithub/workflows rev-parse 64/bin/go git rev-�� --show-toplevel /usr/bin/gh /usr/bin/git k/gh-aw/gh-aw/.ggit piler}} 64/pkg/tool/linu--show-toplevel git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_explicit_repo2443053120/001 config /usr/bin/git remote.origin.urgit GO111MODULE x_amd64/compile git rev-�� mpleWorkflow986394059/001 l 3242448/b465/vet.cfg -json GO111MODULE x_amd64/vet git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/gh ortcfg R30X4Bcts 64/pkg/tool/linu--show-toplevel gh run list --json /usr/bin/gh --workflow nonexistent-workrev-parse --limit gh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv run --auto /usr/bin/git --detach show kflows/daily-tok--show-toplevel git -C /tmp/TestGuardPolicyBlockedUsersCommaSeparatedCompiledOutput2820992178/001 remote /usr/bin/git ithub/workflows rev-parse /usr/bin/git /usr/bin/git (http block)
  • https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ons-test1430072716 -extld=gcc ow-with-reaction.lock.yml -json GO111MODULE x_amd64/compile git -C s/test.md rev-parse /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json t/format.go x_amd64/compile node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --bare --initial-branch=main /usr/bin/git k/gh-aw/gh-aw/.ggit git review.lock.yml git -C k/gh-aw/gh-aw/pkg/cli remote /usr/bin/git ithub/workflows rev-parse .yml git (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv e298b7f212c886866b63ee27 ings.cjs git -m Auth cleanup fai-V=full modules/@npmcli/run-script/lib/nfeature | cat /etc/passwd forks.js k/gh�� -u st/suppress-warnings.cjs ache/node/24.14.1/x64/bin/node e/git t t st/dist/workers//home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv eb510a34..HEAD git $name) { hasDiscussionsEnabled } } user.name Test User /opt/hostedtoolc-m git show�� --verify eb510a34..HEAD ode_modules/.bin/git --bare commit _modules/.bin/gi/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv eb510a34..HEAD git p/bin/git user.name Test User ules/.bin/git git show�� --verify eb510a34..HEAD n-dir/node --bare gin/token-optionapi .git git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv abis 64/pkg/tool/linutest@example.com /usr/bin/git stall-gh-aw.sh tgit DFryr79XR 64/pkg/tool/linu--show-toplevel /usr/bin/git conf�� --get-regexp ^remote\..*\.gh-resolved$ /usr/bin/git ortcfg GO111MODULE 64/pkg/tool/linu--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --git-dir /usr/bin/gh (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv sistency_WithImports975416577/001/main.md rev-parse /usr/bin/git -json GO111MODULE x_amd64/compile git -C /tmp/gh-aw-test-runs/20260424-105142-35624/test-990622104 remote ache/node/24.14.1/x64/bin/node 01 GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --pack_header=2,3 s /opt/hostedtoolcache/node/24.14.1/x64/bin/node ithub/workflows git /usr/bin/git node /tmp�� /tmp/TestHashConsistency_InlinedImports1956869700/001/inlined-b.md (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ons-test1430072716 x_amd64/compile ow-without-reaction.lock.yml -json GO111MODULE x_amd64/compile git -C /tmp/gh-aw-test-runs/20260424-105142-35624/test-990622104 url /usr/bin/git 01 GO111MODULE x_amd64/link git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv --symref l /usr/bin/git ithub/workflows git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name rg/x/text@v0.36.0/internal/tag/tag.go 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 3958751/b013/sym--show-toplevel 64/pkg/tool/linux_amd64/vet env 3958751/b245/_pkg_.a V7o_/18xeupG6XnJInX8DV7o_ .cfg GOINSECURE t/internal/strinrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE sysrand GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3958751/b236/_pkg_.a .cfg k GOINSECURE osh-tekuri/jsonsrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name rev-parse ache/go/1.25.8/x64/pkg/tool/linux_amd64/cgo ch-that-does-notgit git repository(owne--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url -C 5521-50957/test-302651794/.github/workflows show /usr/bin/git k/gh-aw/gh-aw/acinfocmp k/gh-aw/gh-aw/ac-1 me: String!) { xterm-color git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name GO111MODULE x_amd64/link GOINSECURE fips140/sha256 GOMODCACHE x_amd64/link env 3958751/b178/_pkg_.a t2Bi/LbyKJAzlPTfrrG8ct2Bi .cfg GOINSECURE GOMOD GOMODCACHE rg/-NQyIY17MeaXWF6buppr/4AZU-IsIBC3dnlBir49X (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE fips140/check GOMODCACHE 64/pkg/tool/linux_amd64/vet env 990622104 wDwi/8TvZlM4P0nfuVfRvwDwi .cfg GOINSECURE contextprotocol/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name config /usr/bin/git remote.origin.urgit tions/setup/js/nrev-parse r: $owner, name:--show-toplevel git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse .cfg r/work/gh-aw/gh-git /home/REDACTED/worrev-parse me: String!) { --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/asm (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE fips140/sha3 GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3958751/b218/_pkg_.a Ldjv/q8rDzC5dO2KyVIFwLdjv ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE g/x/text/unicoderev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 om/modelcontextp-c=4 64/pkg/tool/linu-nolocalimports GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu/tmp/go-build4003242448/b452/_testmain.go env 990622104 .cfg .cfg GOINSECURE contextprotocol/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-test.v=true (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name show ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile l tions/setup/js/nrev-parse k.yml ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile port�� efaultBranchFromLsRemoteWithRealGitbranch_with_hyphen4239376694/001' efaultBranchFromLsRemoteWithRealGitbranch_with_hyphen4239376694/001' .cfg remote.origin.urgit /home/REDACTED/worrev-parse k/gh-aw/gh-aw/ac--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/cgo (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name rg/x/text@v0.36.0/internal/strin-c=4 64/pkg/tool/linux_amd64/vet GOINSECURE hlite GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3958751/b241/_pkg_.a _zAe/m6K4S-499xrKjIdi_zAe eutil.test GOINSECURE t/internal/langurev-parse GOMODCACHE eutil.test (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE entropy 3958751/b029/sym--show-toplevel 64/pkg/tool/linux_amd64/vet env 3958751/b225/_pkg_.a h5RJ/fhSiz4P0ozPJ9_2Hh5RJ 64/pkg/tool/linux_amd64/compile GOINSECURE ce GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name g/fileutil/tar.go ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile ch-that-does-notgit git repository(owne--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuorigin -C 5521-50957/test-302651794/.github/workflows config ache/go/1.25.8/x64/bin/go remote.origin.urgit uments me: String!) { --show-toplevel git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 3958751/b013/sym--show-toplevel 64/pkg/tool/linux_amd64/vet env 3508101025/.github/workflows 3958751/b013/importcfg util.test GOINSECURE b/gh-aw/pkg/giturev-parse GOMODCACHE util.test (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3958751/b235/_pkg_.a DUdE/2oEXO76xEThYfB4YDUdE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE osh-tekuri/jsonsrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name config At,event,headBranch,headSha,displayTitle remote.origin.urgit git ache/node/24.14.--show-toplevel git -C 5521-50957/test-302651794/.github/workflows rev-parse /usr/bin/git k/gh-aw/gh-aw/acgit k/gh-aw/gh-aw/acrev-parse e_modules/.bin/g--show-toplevel git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name g/gitutil/gitutil.go 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 3958751/b007/sym-unreachable=false 64/pkg/tool/linu/tmp/go-build4003242448/b111/vet.cfg ache�� 3508101025/.github/workflows r73k/ZR15bOYtzO_sNGC5r73k x_amd64/compile GOINSECURE /semver GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 .cfg 64/pkg/tool/linu-test.short=true GOINSECURE fips140/edwards2rev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3958751/b237/_pkg_.a .cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE t/message GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name show ache/go/1.25.8/x64/pkg/tool/linux_amd64/cgo l git ache/node/24.14.--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuorigin -C 5521-50957/test-302651794/.github/workflows config /usr/bin/git remote.origin.ur/usr/bin/git k/gh-aw/gh-aw/acremote es/.bin/go git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name rg/x/mod@v0.35.0/semver/semver.go 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 3958751/b007/sym--show-toplevel 64/pkg/tool/linux_amd64/vet env 3508101025/.github/workflows 7Ps3/Xuna8G_bMUX3GMM57Ps3 .cfg GOINSECURE g/x/net/http/httrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-dwarf=false (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE 3958751/b015/chaconfig ache/go/1.25.8/xuser.email 64/pkg/tool/linutest@example.com env 3958751/b238/_pkg_.a BHdz/-6z_QJDvZKLbBouUBHdz ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE t/feature/pluralrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu--jq (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name rev-parse kflows/workflow-skill-extractor.lock.yml ch-that-does-notgit git r: $owner, name:--show-toplevel git -C 5521-50957/test-302651794/.github/workflows show /usr/bin/git ithub/workflows k/gh-aw/gh-aw/acconfig repository(owne--get-regexp git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path -c=4 -nolocalimports -importcfg /tmp/go-build4003242448/b419/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/fileutil.go /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/tar.go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env b/workflows ijPK/XGaGIDA5hxg1y3cTijPK x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
  • https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
    • Triggering command: /tmp/go-build4003242448/b404/cli.test /tmp/go-build4003242448/b404/cli.test -test.testlogfile=/tmp/go-build4003242448/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /tmp/go-build2896378294/b404/cli.test /tmp/go-build2896378294/b404/cli.test -test.testlogfile=/tmp/go-build2896378294/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true node --conditions development infocmp -1 k/gh-aw/gh-aw/.gunsafe tions/setup/js/node_modules/vite/home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vite--norc ml e298b7f212c88686bash eb510a34..HEAD es/.bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 9Ym34G_sfJyM6o-I12345 /usr/bin/git 5142-35624/test-git -trimpath g_.a git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git 5142-35624/test-ls -trimpath 3242448/b201/vet/tmp/gh-aw/aw-feature-branch.patch git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv ref/tags/v1.0.0 ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile sv /home/REDACTED/worgit show 1/x64/bin/node git rev-�� --show-toplevel git /usr/bin/git Imports195686970ls config ache/uv/0.11.7/x/tmp/gh-aw/aw-feature-branch.patch git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv se 3242448/b011/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE 3958751/b133/arirev-parse ache/go/1.25.8/x--git-dir ache/go/1.25.8/x64/pkg/tool/linu-test.v=true -p DefaultBranchFromLsRemoteWithRea-test.timeout=10m0s DefaultBranchFromLsRemoteWithRea-test.run=^Test .cfg -I /tmp/go-build378rev-parse -I ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv ithub/workflows ghcr.io/github/serena-mcp-server:latest 64/pkg/tool/linux_amd64/asm l ode_modules/vitereset ules/.bin/node 64/pkg/tool/linu.github/workflows/test.md -C k/gh-aw/gh-aw/.github/workflows rev-parse /usr/bin/git onfig.json FFiles,SFiles,Swconfig it git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv go GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ithub/workflows st/dist/workers/forks.js /usr/bin/git origin eb510a34 ules/.bin/node git -C k/gh-aw/gh-aw/.github/workflows show x_amd64/compile l (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE mcpgodebug GOMODCACHE x_amd64/compile env -json 0f7f712e4253505c8 x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env g_.a (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env g_.a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet 8786�� -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv graphql -f oken-audit.lock.yml -f owner=github -f /usr/bin/gh api Gitmaster_branch3997293000/001' Gitmaster_branch3997293000/001' x_amd64/asm l owner=github -f x_amd64/asm (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv g_.a 3242448/b006/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE ole GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-buildtags (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv LsRemoteWithRealGitmain_branch925559724/001' LsRemoteWithRealGitmain_branch925559724/001' 64/bin/go -exist 100180901a861920config 1/x64/bin/node /usr/bin/gh api k/gh-aw/gh-aw -f kflows/jsweep.lock.yml -f owner=github -f git (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE ntio/asm/cpu/armrev-parse GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion ithub/workflows git r: $owner, name:--show-toplevel git -C /home/REDACTED/work/gh-aw/gh-aw show e/git-upload-pack ithub/workflows forks.js .yml go (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json age/compact/comp-ifaceassert x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state .cfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -o t2952578030/.github/workflows -Eee/499QsILxkBjFfa_H-Eee .cfg -buildmode=exe -buildid=NARJ4Wy-1 -s ache/go/1.25.8/x64/pkg/tool/linu-1 (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name /home/REDACTED/work/gh-aw/gh-aw/.github/workflows config er.lock.yml remote.origin.ur/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile ode_modules/vite-o 86_64/git infocmp -1 xterm-color ode_modules/vitemain er: String!, $na-lang=go1.25 -m st/suppress-warn-atomic cal/bin/node git (http block)
  • https://api.github.com/repos/test/repo
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 3958751/b235/_pkg_.a DUdE/2oEXO76xEThYfB4YDUdE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE osh-tekuri/jsonsrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch run l e/git --detach git er: String!, $na--show-toplevel e/git -C /tmp/gh-aw-test-runs/20260424-105521-50957/test-3454967456/.github/workflows config /opt/hostedtoolcache/node/24.14.1/x64/bin/node remote.origin.urgit rev-parse /usr/bin/gh node (http block)
  • invalid.example.invalid
    • Triggering command: /usr/lib/git-core/git-remote-https /usr/lib/git-core/git-remote-https origin https://invalid.example.invalid/nonexistent-repo.git git conf�� --local --get ode_modules/.bin/git cal/bin/git git /git git add . git tions/setup/node_modules/.bin/git -M main bin/git git (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Update golang.org/x/vuln from v1.2.0 to v1.3.0 chore(deps): update golang.org/x/vuln v1.2.0 → v1.3.0 Apr 24, 2026
Copilot AI requested a review from pelikhan April 24, 2026 10:57
@pelikhan pelikhan marked this pull request as ready for review April 24, 2026 13:43
Copilot AI review requested due to automatic review settings April 24, 2026 13:43
@pelikhan pelikhan merged commit 81b9fd0 into main Apr 24, 2026
19 checks passed
@pelikhan pelikhan deleted the copilot/update-golang-org-x-vuln-v1-3-0 branch April 24, 2026 13:43
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the golang.org/x/vuln module version used for govulncheck from v1.2.0 to v1.3.0, refreshing related transitive dependency checksums.

Changes:

  • Bump golang.org/x/vuln to v1.3.0 in go.mod.
  • Refresh go.sum entries for golang.org/x/vuln and update the transitive golang.org/x/telemetry pseudo-version.
Show a summary per file
File Description
go.mod Updates golang.org/x/vuln to v1.3.0 and bumps transitive golang.org/x/telemetry pseudo-version.
go.sum Updates checksums to match the new golang.org/x/vuln and golang.org/x/telemetry versions.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/2 changed files
  • Comments generated: 0

@github-actions github-actions Bot mentioned this pull request Apr 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[deps] Update golang.org/x/vuln from v1.2.0 to v1.3.0

3 participants