Skip to content

fix(deps): update whatsun to v0.2.1 for security fixes - #181

Merged
pjcdawkins merged 1 commit into
mainfrom
fix/bump-whatsun
Sep 25, 2026
Merged

pjcdawkins merged 1 commit into
mainfrom
fix/bump-whatsun

Conversation

@pjcdawkins

Copy link
Copy Markdown
Contributor

whatsun v0.2.1 updates its dependencies to fix govulncheck findings, which are used by the init command's repository analysis:

  • go-git v5.18.0 → v5.19.2
  • go-billy v5.8.0 → v5.9.1
  • cel-go v0.28.0 → v0.31.0

govulncheck now reports no reachable vulnerabilities. This resolves the open Dependabot alerts for these modules. Dependabot didn't open PRs for them because they are indirect dependencies and security updates are disabled.

🤖 Generated with Claude Code

whatsun v0.2.1 updates its dependencies to fix govulncheck findings:
- go-git v5.18.0 => v5.19.2
- go-billy v5.8.0 => v5.9.1
- cel-go v0.28.0 => v0.31.0

These are used by the init command's repository analysis. govulncheck
now reports no reachable vulnerabilities.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@pjcdawkins
pjcdawkins merged commit 81e567f into main Sep 25, 2026
6 checks passed
@pjcdawkins
pjcdawkins deleted the fix/bump-whatsun branch September 25, 2026 13:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant