Skip to content

Bump github.com/kubescape/storage from 0.0.166 to 0.2.0 #2719

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 7, 2025

Bumps github.com/kubescape/storage from 0.0.166 to 0.2.0.

Release notes

Sourced from github.com/kubescape/storage's releases.

Release v0.0.185

What's Changed

Full Changelog: kubescape/storage@v0.0.184...v0.0.185

Release v0.0.184

Sorry, we do not accept changes directly against this repository. Please see CONTRIBUTING.md for information on where and how to contribute instead.

Release v0.0.183

No release notes provided.

Release v0.0.182

No release notes provided.

Release v0.0.180

Sorry, we do not accept changes directly against this repository. Please see CONTRIBUTING.md for information on where and how to contribute instead.

Release v0.0.179

Sorry, we do not accept changes directly against this repository. Please see CONTRIBUTING.md for information on where and how to contribute instead.

Release v0.0.178

No release notes provided.

Release v0.0.175

What's Changed

Full Changelog: kubescape/storage@v0.0.174...v0.0.175

Release v0.0.174

we will eventually implement cleanup later

What's Changed

Full Changelog: kubescape/storage@v0.0.172...v0.0.174

Release v0.0.172

No release notes provided.

Release v0.0.171

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/kubescape/storage](https://github.com/kubescape/storage) from 0.0.166 to 0.2.0.
- [Release notes](https://github.com/kubescape/storage/releases)
- [Commits](https://github.com/kubescape/storage/commits)

---
updated-dependencies:
- dependency-name: github.com/kubescape/storage
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 7, 2025
Copy link

Kusari Analysis Results

Analysis for commit: 32eb074, performed at: 2025-07-07T22:29:17Z

@kusari-inspector rerun - Trigger a re-analysis of this PR

@kusari-inspector feedback [your message] - Send feedback to our AI and team


Recommendation

✅ PROCEED with this Pull Request

Summary

No Flagged Issues Detected

All values appear to be within acceptable risk parameters.

This PR safely updates github.com/kubescape/storage from 0.0.166 to 0.2.0 while adding three well-maintained dependencies with permissive licenses (MIT, Apache-2.0). No vulnerabilities were detected in any of the added or updated packages. The security code analysis found zero issues across all categories. While some added dependencies are not on their absolute latest versions, they are recent and have strong security scorecard ratings for maintenance and code review practices.

Found this helpful? Give it a 👍 or 👎 reaction!

Click to expand for details and specific link to issues

Dependency Changes

Status Package Change Version Latest Version Advisories License
⚠️ Flagged go.opentelemetry.io/otel/sdk/log removed 0.6.0 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/contrib/instrumentation/runtime removed 0.55.0 Unknown None Unknown
⚠️ Flagged github.com/uptrace/opentelemetry-go-extra/otelzap removed 0.3.2 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp removed 1.30.0 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp removed 0.6.0 Unknown None Unknown
⚠️ Flagged github.com/uptrace/opentelemetry-go-extra/otelutil removed 0.3.2 Unknown None Unknown
⚠️ Flagged github.com/seccomp/libseccomp-golang removed 0.10.0 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp removed 1.33.0 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/otel/exporters/stdout/stdouttrace removed 1.30.0 Unknown None Unknown
⚠️ Flagged github.com/yl2chen/cidranger removed 1.0.2 Unknown None Unknown
⚠️ Flagged github.com/briandowns/spinner removed 1.23.1 Unknown None Unknown
⚠️ Flagged github.com/kubescape/go-logger removed 0.0.23 Unknown None Unknown
⚠️ Flagged github.com/uptrace/uptrace-go removed 1.30.1 Unknown None Unknown
⚠️ Flagged go.opentelemetry.io/otel/log removed 0.6.0 Unknown None Unknown
⚠️ Flagged github.com/containers/common removed 0.60.4 Unknown None Unknown

Risk Details

Safe Dependency Changes

Status Package Change Version Latest Version Advisories License
✅ Safe github.com/Microsoft/hcsshim added 0.12.5 v0.13.0 None MIT (permissive), Apache-2.0 (permissive)
✅ Safe github.com/kubescape/storage updated 0.0.166 → 0.2.0 v0.0.185 None Apache-2.0 (permissive)
✅ Safe github.com/mattn/go-sqlite3 added 1.14.22 v1.14.28 None MIT (permissive)
✅ Safe github.com/containerd/cgroups/v3 added 3.0.3 v3.0.5 None Apache-2.0 (permissive)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code size/S
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant