Unreleased Commits - UnitVectorY-Labs
Repository: gcpvalidate
Default Branch: main
Latest Release: v0.1.3
Release Date: September 3, 2026
Unreleased Commits: 43
Days Behind: 58
Days Since Release: 60

Unreleased Commits

d1a665dce59e96aafba0ed9e8244f6f7bac456e5 JaredHatfield Oct 31, 2026 19:29 merge
Merge pull request #112 from UnitVectorY-Labs/chore/remove-govulncheck-workflow chore: remove govulncheck-go workflow superseded by OSV-Scanner
0f436b2cc9309ad1b8ae1ebc34c9627c3eaa6e26 JaredHatfield Oct 31, 2026 19:20
chore: remove govulncheck-go workflow superseded by OSV-Scanner OSV-Scanner (osv-scanner-full.yml / osv-scanner-pr.yml) now provides dependency vulnerability scanning for this repository, so the Go-only govulncheck workflow is redundant. The two govulncheck GOVERSION targets are dropped from .repver as well, because repver fails when a target file cannot be read, and the file is removed from the .managedfiles manifest.
8454f30f9508ea4df455d72e727d05305575d93b JaredHatfield Oct 31, 2026 12:57 merge
Merge pull request #110 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.3 build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3
f707ad58a8f242859f8c32fe167b5ea1e0c94ec6 JaredHatfield Oct 31, 2026 11:53 merge
Merge pull request #111 from UnitVectorY-Labs/dependabot/github_actions/UnitVectorY-Labs/chromadb-repo-indexer-1.2.1 build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1
712abc5ab30baaa081806fc673bed60b782bb6ab dependabot[bot] Oct 31, 2026 10:17
build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer Bumps [UnitVectorY-Labs/chromadb-repo-indexer](https://github.com/unitvectory-labs/chromadb-repo-indexer) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/unitvectory-labs/chromadb-repo-indexer/releases) - [Commits](https://github.com/unitvectory-labs/chromadb-repo-indexer/compare/69bfd4086b9251106a5c8b036068e02f2d0731aa...8ee570e0b30e5252afadb146977b411b8acd3e34) --- updated-dependencies: - dependency-name: UnitVectorY-Labs/chromadb-repo-indexer dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
c1355437042952cb6b42864a25c8919a1f0e28a2 dependabot[bot] Oct 31, 2026 10:17
build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.1 to 10.3.3. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
8e77c34f48289b0b23a82591bde6aea0868c19eb JaredHatfield Oct 25, 2026 00:20 merge
Merge pull request #109 from UnitVectorY-Labs/repver/go-v1.27.3 Update Go version to v1.27.3
f0b1c26075b6295b3ccbeeed13b1d1fa0e9cf552 JaredHatfield Oct 25, 2026 00:12
Update Go version to v1.27.3
9626b377ff45fd2f5565057b379907a69873380e JaredHatfield Oct 24, 2026 15:31
Add weekly OSV-Scanner vulnerability scans (#106) * Add weekly OSV-Scanner vulnerability scans * Fix OSV merge-group workflow routing * Align OSV-Scanner workflows with SARIF policy * Configure gitrepoforge OSV SARIF workflows --------- Co-authored-by: OpenCode <opencode@users.noreply.github.com>
28bbfb5205e411acbf747eee0fb1d0b2bd99dcd7 JaredHatfield Oct 24, 2026 13:02 merge
Merge pull request #107 from UnitVectorY-Labs/dependabot/github_actions/codeql-52fc152648 build(deps): bump the codeql group with 3 updates
b02ba6ad1732cb3d52c307eb16ea280d87d2122b JaredHatfield Oct 24, 2026 12:20 merge
Merge pull request #108 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.1 build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1
26a86e6bff689cfe5900eac0fa8a05d1dac84bc3 dependabot[bot] Oct 24, 2026 10:10
build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.1. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
3fc733a3288bb2e176182c50a2c4a21b0e379012 dependabot[bot] Oct 24, 2026 10:10
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
8823da2be7d1c5797d98604baa66ff6ee22a90d1 JaredHatfield Oct 17, 2026 15:33 merge
Merge pull request #105 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2
a2a6d141c1b8fe35ac2b3660080d349f5e599e01 JaredHatfield Oct 17, 2026 14:04
Update Go version to v1.27.2
6f71358bd4ee6d54e97e68e0abcef4426cbdd4ec JaredHatfield Oct 17, 2026 13:54 merge
Merge pull request #103 from UnitVectorY-Labs/dependabot/github_actions/codeql-307b189a33 build(deps): bump the codeql group with 3 updates
c6eb8528144d059a7088fdaaf10a686575721a8e JaredHatfield Oct 17, 2026 13:51 merge
Merge pull request #104 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.0 build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0
61369a685e41e2cbdfb8e7427f2961c3c28a2f2c dependabot[bot] Oct 17, 2026 10:09
build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
f7a7ded1b8cd74f6898b860c55779de07fcee9fb dependabot[bot] Oct 17, 2026 10:09
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
68d4be69bd362d5da5cf2b29b739d9386301b13f JaredHatfield Oct 11, 2026 00:07 merge
Merge pull request #102 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2
7f3d0d9301ff9102d18fb68a070f7d230074362d JaredHatfield Oct 10, 2026 23:50
Update Go version to v1.27.2
b6dfe6e7ff0cb92a276d8d0b0f1d90073cb31889 JaredHatfield Oct 10, 2026 12:55 merge
Merge pull request #100 from UnitVectorY-Labs/dependabot/github_actions/actions/upload-artifact-7.0.2 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
b2518f4e725af42096f55267bbe057079433985e JaredHatfield Oct 10, 2026 12:14 merge
Merge pull request #101 from UnitVectorY-Labs/fix/govulncheck-sarif-duplicate-stacks Fix govulncheck SARIF upload failures
24e330150495ee24125402f6e9d720ccf333b996 JaredHatfield Oct 10, 2026 12:06
fix: deduplicate govulncheck SARIF stacks
123c6bdb808a8f448570bd16108f5d4c36a15af7 dependabot[bot] Oct 10, 2026 10:09
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
bfb00b9550f2d1500b195683cae3d957a68e6e54 JaredHatfield Oct 6, 2026 01:48 merge
Merge pull request #99 from UnitVectorY-Labs/gitrepoforge/govulncheck-sarif Add official govulncheck SARIF scanning
127ed751c3758f056c48687b21af2446388d67cc JaredHatfield Oct 6, 2026 00:53
Add official govulncheck SARIF scanning
86459b45bfa780a157402af19d1cd2fea5ec984c JaredHatfield Oct 4, 2026 12:53 merge
Merge pull request #98 from UnitVectorY-Labs/dependabot/github_actions/codeql-9d88a12d2b build(deps): bump the codeql group with 3 updates
e264502a694ce28331261c86a1f8183f7d4dd6d8 dependabot[bot] Oct 3, 2026 10:08
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
a34294174c2147ddc2bec06855b266a048567d29 JaredHatfield Sep 26, 2026 17:38 merge
Merge pull request #97 from UnitVectorY-Labs/dependabot/github_actions/codeql-c83b7ed659 build(deps): bump the codeql group with 2 updates
4fb1ee3ee0d2b4a2239945fc3c7bc53b548a6d96 dependabot[bot] Sep 26, 2026 16:46
build(deps): bump the codeql group with 2 updates Bumps the codeql group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
36f81a27ee1b8050c9b7e4e61ee04964e871fe55 JaredHatfield Sep 26, 2026 16:42 merge
Merge pull request #96 from UnitVectorY-Labs/gitrepoforge/gcpvalidate gitrepoforge: apply desired state for gcpvalidate
3a5d36810800e1b7ad949e2132d2ec1cf63146a4 JaredHatfield Sep 26, 2026 16:17
gitrepoforge: apply desired state for gcpvalidate
ed064d6b198b5ea6312a8d5a6ed098fa6c4e67bc JaredHatfield Sep 26, 2026 13:08 merge
Merge pull request #94 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.2.0 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0
509207936c8b40995dad7cc2fb7763e97b6b61c9 JaredHatfield Sep 26, 2026 12:35 merge
Merge pull request #93 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1 build(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1
8baa94971d2b92a56867cf5a2e326284073192e9 dependabot[bot] Sep 26, 2026 10:08
build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.1.0 to 10.2.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
9dcb05cddd12beca470c61739355749f933df0dd dependabot[bot] Sep 26, 2026 10:07
build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.38.0 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
60b9027e69d38d730f96bb8c5cc3200deb98a367 JaredHatfield Sep 19, 2026 12:22 merge
Merge pull request #91 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.1.0 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0
f2d4cdb63718eda17ba1ef55c913cc0c68ae766d dependabot[bot] Sep 19, 2026 10:07
build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.0.1 to 10.1.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2301518fb6fe8c932a2cf04730c14b7cea389714 JaredHatfield Sep 12, 2026 14:47 merge
Merge pull request #90 from UnitVectorY-Labs/chore/codeql-4.38.0 Bump CodeQL version to 4.38.0
8645316fa3fc76b6c008ada525ba5663f6f25ae8 Jared Sep 12, 2026 13:09
Bump CodeQL version to 4.38.0
e3b0f27afd78baed9153c55b797129dbba00c0e4 JaredHatfield Sep 12, 2026 12:12 merge
Merge pull request #88 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0 build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
2eab6077c5bba42b2a2d57b17a281b6d16b750f3 dependabot[bot] Sep 12, 2026 10:09
build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>