Merge pull request #104 from UnitVectorY-Labs/deps/x-text-v0.41.0
chore(deps): bump golang.org/x/text to v0.41.0
chore(deps): bump golang.org/x/text to v0.41.0
golang.org/x/text@v0.41.0 fixes GO-2026-6629 (CVE-2026-56851), a panic when parsing crafted input in x/text/secure/precis, reported against go.mod.
Verified with: go get golang.org/x/text@v0.41.0 && go mod tidy && go build ./...
Merge pull request #103 from UnitVectorY-Labs/chore/remove-govulncheck-workflow
chore: remove govulncheck-go workflow superseded by OSV-Scanner
chore: remove govulncheck-go workflow superseded by OSV-Scanner
OSV-Scanner (osv-scanner-full.yml / osv-scanner-pr.yml) now provides
dependency vulnerability scanning for this repository, so the Go-only
govulncheck workflow is redundant.
The two govulncheck GOVERSION targets are dropped from .repver as well,
because repver fails when a target file cannot be read, and the file is
removed from the .managedfiles manifest.
Merge pull request #102 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.3
build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3
Merge pull request #101 from UnitVectorY-Labs/dependabot/github_actions/UnitVectorY-Labs/chromadb-repo-indexer-1.2.1
build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1
build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.1 to 10.3.3.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer
Bumps [UnitVectorY-Labs/chromadb-repo-indexer](https://github.com/unitvectory-labs/chromadb-repo-indexer) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/unitvectory-labs/chromadb-repo-indexer/releases)
- [Commits](https://github.com/unitvectory-labs/chromadb-repo-indexer/compare/69bfd4086b9251106a5c8b036068e02f2d0731aa...8ee570e0b30e5252afadb146977b411b8acd3e34)
---
updated-dependencies:
- dependency-name: UnitVectorY-Labs/chromadb-repo-indexer
dependency-version: 1.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #100 from UnitVectorY-Labs/repver/go-v1.27.3
Update Go version to v1.27.3
Update Go version to v1.27.3
Add weekly OSV-Scanner vulnerability scans (#97)
* Add weekly OSV-Scanner vulnerability scans
* security: split OSV source scan workflows
* security: refine OSV scanner event filters
Merge pull request #98 from UnitVectorY-Labs/dependabot/github_actions/codeql-52fc152648
build(deps): bump the codeql group with 3 updates
Merge pull request #99 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.1
build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1
build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
build(deps): bump the codeql group with 3 updates
Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #96 from UnitVectorY-Labs/repver/go-v1.27.2
Update Go version to v1.27.2
Update Go version to v1.27.2
Merge pull request #94 from UnitVectorY-Labs/dependabot/github_actions/codeql-307b189a33
build(deps): bump the codeql group with 3 updates
Merge pull request #95 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.0
build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0
build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
build(deps): bump the codeql group with 3 updates
Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #93 from UnitVectorY-Labs/repver/go-v1.27.2
Update Go version to v1.27.2
Update Go version to v1.27.2
Merge pull request #91 from UnitVectorY-Labs/dependabot/github_actions/actions/upload-artifact-7.0.2
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
Merge pull request #92 from UnitVectorY-Labs/fix/govulncheck-sarif-duplicate-stacks
Fix govulncheck SARIF upload failures
fix: deduplicate govulncheck SARIF stacks
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>