Skip to content

chore(deps): update indirect dependencies to fix dependabot alerts 50…#1425

Merged
kongfei605 merged 1 commit into
flashcatcloud:mainfrom
kongfei605:deps
Apr 9, 2026
Merged

chore(deps): update indirect dependencies to fix dependabot alerts 50…#1425
kongfei605 merged 1 commit into
flashcatcloud:mainfrom
kongfei605:deps

Conversation

@kongfei605

Copy link
Copy Markdown
Collaborator

…, 66, 67

Copilot AI review requested due to automatic review settings April 9, 2026 06:53
@kongfei605 kongfei605 merged commit 981ce4d into flashcatcloud:main Apr 9, 2026
2 of 4 checks passed
@kongfei605 kongfei605 deleted the deps branch April 9, 2026 06:53

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Go module dependencies in flashcat.cloud/categraf, primarily to address Dependabot alerts, by changing the Docker dependency version and refreshing related indirect module metadata.

Changes:

  • Bumped github.com/docker/docker version and updated corresponding go.sum entries.
  • Added new indirect dependencies (e.g., github.com/containerd/errdefs, github.com/moby/sys/atomicwriter) and checksums.
  • Modified the replace block in go.mod (added a Docker replace; removed the kardianos/service fork replace).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
go.mod Updates Docker requirement, adds indirect deps, and changes replace directives.
go.sum Adds checksums for newly introduced indirect deps and updates Docker checksums.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread go.mod
)

replace (
github.com/docker/docker => github.com/docker/docker v27.1.1

Copilot AI Apr 9, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

require was bumped to github.com/docker/docker v28.5.2, but the new replace forces the build to use github.com/docker/docker v27.1.1 instead. This effectively negates the upgrade (and may leave Dependabot-reported vulnerabilities unresolved) while making the module graph confusing. Drop the replace if the goal is to actually upgrade, or align the replace target to the intended version and re-run go mod tidy so go.sum matches the effective version.

Suggested change
github.com/docker/docker => github.com/docker/docker v27.1.1

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants