build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.17.0 to 1.18.0 #3869
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…database/sql/splunksql Bumps [github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql](https://github.com/signalfx/splunk-otel-go) from 1.17.0 to 1.18.0. - [Release notes](https://github.com/signalfx/splunk-otel-go/releases) - [Changelog](https://github.com/signalfx/splunk-otel-go/blob/main/CHANGELOG.md) - [Commits](signalfx/splunk-otel-go@v1.17.0...v1.18.0) --- updated-dependencies: - dependency-name: github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql
Trusty Score: 4.6
Scoring details
| Component | Score |
|---|---|
| Malicious | false |
| Provenance | 10 |
| User activity | 5.7 |
| Repository activity | 3.6 |
| From | activity |
| Package activity | 4.6 |
| Trust-summary | 5 |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 24 |
| Number of git tags or releases | 239 |
| Versions matched to tags or releases | 12 |
|
Looks like github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql is up-to-date now, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/go_modules/github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql-1.18.0
branch
|
@dependabot rebase |
|
Looks like this PR is closed. If you re-open it, I'll rebase it, as long as no-one else has edited it. |
Bumps github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.17.0 to 1.18.0.
Release notes
Sourced from github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql's releases.
Changelog
Sourced from github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql's changelog.
Commits
9085704Release 1.18.0 (#3339)6ea4370chore(deps): update module github.com/jackc/pgx/v5 to v5.6.0 (#3272)0cbc3b2chore(deps): update k8s.io/utils digest to 18e509b (#3338)7ad30f6chore(deps): update k8s.io/kube-openapi digest to 3c01b74 (#3308)016ccd5fix(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http...13b6e79chore(deps): update module github.com/docker/docker to v26.1.4+incompatible (...f79c9a2chore(deps): update module golang.org/x/sys to v0.22.0 (#3326)c8b85b1chore(deps): update jaegertracing/all-in-one docker tag to v1.59.0 (#3333)c8cd640chore(deps): update module github.com/docker/cli to v26.1.4+incompatible (#3335)0567595chore(deps): update module golang.org/x/net to v0.27.0 (#3325)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)