Skip to content

fix(deps): update module github.com/slack-go/slack to v0.27.0#307

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-slack-go-slack-0.x
Open

fix(deps): update module github.com/slack-go/slack to v0.27.0#307
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-slack-go-slack-0.x

Conversation

@renovate

@renovate renovate Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/slack-go/slack v0.26.0v0.27.0 age confidence

Release Notes

slack-go/slack (github.com/slack-go/slack)

v0.27.0

Compare Source

Added

  • Support for data_visualization block through DataVisualizationBlock.
  • Teamnow preservesenterprise_idandenterprise_namewhen Slack includes Enterprise org details in interaction payloadteam` objects.

Full Changelog: slack-go/slack@v0.26.0...v0.27.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jun 27, 2026
@github-actions

github-actions Bot commented Jun 27, 2026

Copy link
Copy Markdown

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ COPYPASTE jscpd yes no no 1.96s
✅ REPOSITORY betterleaks yes no no 0.92s
✅ REPOSITORY checkov yes no no 25.12s
⚠️ REPOSITORY devskim yes 1 no 2.62s
✅ REPOSITORY dustilock yes no no 0.02s
✅ REPOSITORY gitleaks yes no no 7.47s
✅ REPOSITORY git_diff yes no no 0.04s
❌ REPOSITORY grype yes 1 no 44.21s
✅ REPOSITORY kingfisher yes no no 7.25s
⚠️ REPOSITORY osv-scanner yes 1 no 1.99s
✅ REPOSITORY secretlint yes no no 3.19s
✅ REPOSITORY syft yes no no 2.75s
❌ REPOSITORY trivy yes 1 no 12.22s
✅ REPOSITORY trivy-sbom yes no no 7.2s
✅ REPOSITORY trufflehog yes no no 4.53s

Detailed Issues

❌ REPOSITORY / grype - 1 error
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                  INSTALLED  TYPE       VULNERABILITY        SEVERITY  EPSS  RISK  
oras.land/oras-go/v2  v2.6.1     go-module  GHSA-fxhp-mv3v-67qp  High      N/A   N/A   
golang.org/x/crypto   v0.53.0    go-module  GO-2026-5932         Unknown   N/A   N/A
[0044] ERROR discovered vulnerabilities at or above the severity threshold
❌ REPOSITORY / trivy - 1 error
----------------------------------->] 100.00% 103.17 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [------------------------------------------->] 100.00% 103.17 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 96.51 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 96.51 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 96.51 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 90.29 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 90.29 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 90.29 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 84.46 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 84.46 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 84.46 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 79.01 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 79.01 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-------------------------------------------->] 100.00% 79.01 MiB p/s ETA 0s100.00 MiB / 100.00 MiB [-----------------------------------------------] 100.00% 16.86 MiB p/s 6.1s2026-07-12T18:40:59Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-07-12T18:40:59Z	INFO	[vuln] Vulnerability scanning is enabled
2026-07-12T18:40:59Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-07-12T18:40:59Z	INFO	[checks-client] Need to update the checks bundle
2026-07-12T18:40:59Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [------------------------------------------------------] 100.00% ? p/s 200ms2026-07-12T18:41:03Z	INFO	Number of language-specific files	num=2
2026-07-12T18:41:03Z	INFO	[gomod] Detecting vulnerabilities...
2026-07-12T18:41:03Z	INFO	Detected config files	num=16
2026-07-12T18:41:03Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.71/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│                      Target                      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod                                           │   gomod    │        2        │         -         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ test/go.mod                                      │   gomod    │        1        │         -         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ build/Dockerfile                                 │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ build/Dockerfile.config_exporter                 │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docs/investigation/rbac/assets/clusterrole.yaml  │ kubernetes │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docs/investigation/rbac/assets/clusterrole2.yaml │ kubernetes │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docs/investigation/rbac/assets/role.yaml         │ kubernetes │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/clusterrole.yaml          │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/clusterrolebinding.yaml   │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/communicationsecret.yaml  │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/deployment.yaml           │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/global-config.yaml        │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/persistent-config.yaml    │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/rbac-groups.yaml          │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/service.yaml              │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/serviceaccount.yaml       │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/system-config.yaml        │    helm    │        -        │         0         │
├──────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ helm/botkube/templates/systemroles.yaml          │    helm    │        -        │         0         │
└──────────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.71/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 2 (UNKNOWN: 1, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌──────────────────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│       Library        │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                          Title                           │
├──────────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ golang.org/x/crypto  │ GO-2026-5932   │ UNKNOWN  │ affected │ v0.53.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained, │
│                      │                │          │          │                   │               │ unsafe by design, and has known security...              │
├──────────────────────┼────────────────┼──────────┤          ├───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ oras.land/oras-go/v2 │ CVE-2026-50163 │ HIGH     │          │ v2.6.1            │               │ `oras-go` tar extraction: Hardlink entry with relative   │
│                      │                │          │          │                   │               │ Linkname escapes extract dir via...                      │
│                      │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-50163               │
└──────────────────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘

test/go.mod (gomod)
===================
Total: 1 (UNKNOWN: 1, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌─────────────────────┬───────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│       Library       │ Vulnerability │ Severity │  Status  │ Installed Version │ Fixed Version │                          Title                           │
├─────────────────────┼───────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ golang.org/x/crypto │ GO-2026-5932  │ UNKNOWN  │ affected │ v0.52.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained, │
│                     │               │          │          │                   │               │ unsafe by design, and has known security...              │
└─────────────────────┴───────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.72.0 of Trivy is now available, current version is 0.71.2

To suppress version checks, run Trivy scans with the --skip-version-check flag

(Truncated to last 10000 characters out of 11852)
⚠️ REPOSITORY / devskim - 1 error
ug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"internal/config/testdata/TestGetProvider/all.yaml"},"region":{"startLine":17,"startColumn":18,"endLine":17,"endColumn":27,"charOffset":383,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"yaml"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS162092","level":"note","message":{"text":"Do not leave debug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"internal/config/testdata/TestGetProvider/from-cli-flag-second.yaml"},"region":{"startLine":5,"startColumn":18,"endLine":5,"endColumn":27,"charOffset":74,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"yaml"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS112852","level":"note","message":{"text":"Go - Hard-coded SSL/TLS Protocol"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/grpcx/credentials.go"},"region":{"startLine":47,"startColumn":39,"endLine":47,"endColumn":51,"charOffset":1393,"charLength":12,"snippet":{"text":"VersionTLS13","rendered":{"text":"VersionTLS13","markdown":"`VersionTLS13`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Cryptography.Protocol.TLS.Hard-Coded"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/api/source/grpc_adapter.go"},"region":{"startLine":175,"startColumn":7,"endLine":175,"endColumn":11,"charOffset":5454,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"internal/source/kubernetes/recommendation/ingress_backend_service_valid.go"},"region":{"startLine":59,"startColumn":7,"endLine":59,"endColumn":11,"charOffset":2041,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/slack_cloud.go"},"region":{"startLine":571,"startColumn":4,"endLine":571,"endColumn":8,"charOffset":18684,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/slack_cloud.go"},"region":{"startLine":349,"startColumn":7,"endLine":349,"endColumn":11,"charOffset":11675,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"internal/executor/kubectl/builder/kubectl_dropdowns.go"},"region":{"startLine":134,"startColumn":5,"endLine":134,"endColumn":9,"charOffset":3427,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/slack_socket.go"},"region":{"startLine":250,"startColumn":9,"endLine":250,"endColumn":13,"charOffset":8620,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/slack_socket.go"},"region":{"startLine":32,"startColumn":3,"endLine":32,"endColumn":7,"charOffset":769,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/discord.go"},"region":{"startLine":353,"startColumn":4,"endLine":353,"endColumn":8,"charOffset":10980,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/discord.go"},"region":{"startLine":188,"startColumn":3,"endLine":188,"endColumn":7,"charOffset":6161,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/discord.go"},"region":{"startLine":27,"startColumn":3,"endLine":27,"endColumn":7,"charOffset":588,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/mattermost.go"},"region":{"startLine":358,"startColumn":4,"endLine":358,"endColumn":8,"charOffset":11218,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/mattermost.go"},"region":{"startLine":47,"startColumn":3,"endLine":47,"endColumn":7,"charOffset":1269,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/mattermost.go"},"region":{"startLine":28,"startColumn":3,"endLine":28,"endColumn":7,"charOffset":581,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS162092","level":"note","message":{"text":"Do not leave debug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/config/testdata/TestLoadConfigSuccess/config.golden.yaml"},"region":{"startLine":153,"startColumn":18,"endLine":153,"endColumn":27,"charOffset":3376,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"yaml"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS162092","level":"note","message":{"text":"Do not leave debug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"pkg/bot/slack_renderer_test.go"},"region":{"startLine":50,"startColumn":30,"endLine":50,"endColumn":39,"charOffset":1426,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS162092","level":"note","message":{"text":"Do not leave debug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"hack/target/serve-plugins/main.go"},"region":{"startLine":16,"startColumn":66,"endLine":16,"endColumn":75,"charOffset":334,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"go"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":".github/workflows/branch-build.yml"},"region":{"startLine":16,"startColumn":27,"endLine":16,"endColumn":31,"charOffset":318,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"yaml"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}}],"columnKind":"utf16CodeUnits"}]}

(Truncated to last 10000 characters out of 24930)
⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
Scanned test/go.mod file and found 167 packages
Scanned go.mod file and found 260 packages
Scanned examples/src/go.mod file and found 9 packages
End status: 205 dirs visited, 897 inodes visited, 3 Extract calls, 23.572564ms elapsed, 23.57265ms wall time
Filtered 1 local/unscannable package/s from the scan.
Failed to run code analysis (govulncheck) on 'examples/src/go.mod' because govulncheck: loading packages: err: exit status 1: stderr: go: go.mod requires go >= 1.26.4 (running go 1.26.3; GOTOOLCHAIN=local)

(the Go toolchain is required)
Failed to run code analysis (govulncheck) on 'go.mod' because govulncheck: loading packages: err: exit status 1: stderr: go: go.mod requires go >= 1.26.4 (running go 1.26.3; GOTOOLCHAIN=local)

(the Go toolchain is required)
Failed to run code analysis (govulncheck) on 'test/go.mod' because govulncheck: loading packages: err: exit status 1: stderr: go: go.mod requires go >= 1.26.4 (running go 1.26.3; GOTOOLCHAIN=local)

(the Go toolchain is required)

Total 7 packages affected by 13 known vulnerabilities (0 Critical, 1 High, 0 Medium, 0 Low, 12 Unknown) from 1 ecosystem.
10 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+----------------------+---------+---------------+---------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE              | VERSION | FIXED VERSION | SOURCE              |
+-------------------------------------+------+-----------+----------------------+---------+---------------+---------------------+
| https://osv.dev/GO-2026-4961        |      | Go        | golang.org/x/image   | 0.41.0  | 0.42.0        | examples/src/go.mod |
| https://osv.dev/GO-2026-5061        |      | Go        | golang.org/x/image   | 0.41.0  | 0.43.0        | examples/src/go.mod |
| https://osv.dev/GO-2026-5062        |      | Go        | golang.org/x/image   | 0.41.0  | 0.43.0        | examples/src/go.mod |
| https://osv.dev/GO-2026-5066        |      | Go        | golang.org/x/image   | 0.41.0  | 0.43.0        | examples/src/go.mod |
| https://osv.dev/GO-2026-4970        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | examples/src/go.mod |
| https://osv.dev/GO-2026-5856        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | examples/src/go.mod |
| https://osv.dev/GO-2026-5932        |      | Go        | golang.org/x/crypto  | 0.53.0  | --            | go.mod              |
| https://osv.dev/GHSA-fxhp-mv3v-67qp | 7.1  | Go        | oras.land/oras-go/v2 | 2.6.1   | --            | go.mod              |
| https://osv.dev/GO-2026-4970        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | go.mod              |
| https://osv.dev/GO-2026-5856        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | go.mod              |
| https://osv.dev/GO-2026-5932        |      | Go        | golang.org/x/crypto  | 0.52.0  | --            | test/go.mod         |
| https://osv.dev/GO-2026-4970        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | test/go.mod         |
| https://osv.dev/GO-2026-5856        |      | Go        | stdlib               | 1.26.4  | 1.26.5        | test/go.mod         |
+-------------------------------------+------+-----------+----------------------+---------+---------------+---------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@renovate
renovate Bot force-pushed the renovate/github.com-slack-go-slack-0.x branch from 863147a to 7b4b886 Compare July 12, 2026 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants