Skip to content

fix(deps): update module github.com/stretchr/testify to v1.12.0 - #524

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-stretchr-testify-1.x
Open

fix(deps): update module github.com/stretchr/testify to v1.12.0#524
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-stretchr-testify-1.x

Conversation

@renovate

@renovate renovate Bot commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/stretchr/testify v1.11.1 → v1.12.0 age confidence

Release Notes

stretchr/testify (github.com/stretchr/testify)

v1.12.0

Compare Source

What's Changed

Functional Changes
Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge August 17, 2026 09:37
@dev-hato-app dev-hato-app Bot added this to task list Aug 17, 2026
@github-project-automation github-project-automation Bot moved this to In Progress in task list Aug 17, 2026
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

Super-linter summary

Language Validation result
BASH Pass ✅
BASH_EXEC Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
GO_RELEASER Pass ✅
JSCPD Pass ✅
JSON Pass ✅
JSON_PRETTIER Pass ✅
MARKDOWN Pass ✅
MARKDOWN_PRETTIER Pass ✅
NATURAL_LANGUAGE Pass ✅
PRE_COMMIT Pass ✅
RENOVATE Pass ✅
SHELL_SHFMT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Fail ❌
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

GITHUB_ACTIONS_ZIZMOR 
�[1m�[33mwarning[ref-version-mismatch]�[0m�[1m: action's hash pin has mismatched or missing version comment�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/format.yml:31:99
   �[1m�[94m|�[0m
�[1m�[94m31�[0m �[1m�[94m|�[0m         uses: flatt-security/setup-takumi-guard-golang@2e3c7c40b538cd68b2ac483def12982ebc8bc02e # v1
   �[1m�[94m|�[0m                                                                                                   �[1m�[33m^^�[0m �[1m�[33mpoints to commit 1c8aa7498f7f�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#ref-version-mismatch�[39m

�[1m�[33mwarning[ref-version-mismatch]�[0m�[1m: action's hash pin has mismatched or missing version comment�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/test.yml:35:99
   �[1m�[94m|�[0m
�[1m�[94m35�[0m �[1m�[94m|�[0m       - uses: flatt-security/setup-takumi-guard-golang@2e3c7c40b538cd68b2ac483def12982ebc8bc02e # v1
   �[1m�[94m|�[0m                                                                                                   �[1m�[33m^^�[0m �[1m�[33mpoints to commit 1c8aa7498f7f�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#ref-version-mismatch�[39m

�[32m42�[39m findings (�[1m�[93m40�[39m suppressed�[0m): �[35m0�[39m informational, �[36m0�[39m low, �[33m2�[39m medium, �[31m0�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.25.2
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/dependabot.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/add-to-task-list.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/dependency_review.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/format-json-yml.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/format.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/github-actions-cache-cleaner.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/release.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/super-linter.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/test.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/update-gitleaks.yml
TRIVY 

Report Summary

┌────────┬───────┬─────────────────┬───────────────────┬─────────┐
│ Target │ Type  │ Vulnerabilities │ Misconfigurations │ Secrets │
├────────┼───────┼─────────────────┼───────────────────┼─────────┤
│ go.mod │ gomod │        2        │         -         │    -    │
└────────┴───────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.71/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 2 (UNKNOWN: 2, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│     Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├──────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ golang.org/x/mod │ CVE-2026-56864 │ UNKNOWN  │ fixed  │ v0.37.0           │ 0.40.0        │ A malicious GOSUMDB was capable of serving arbitrary module │
│                  │                │          │        │                   │               │ content no ......                                           │
│                  │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56864                  │
│                  ├────────────────┤          │        │                   │               ├─────────────────────────────────────────────────────────────┤
│                  │ CVE-2026-56865 │          │        │                   │               │ A malicious GOPROXY was previously capable of forging up to │
│                  │                │          │        │                   │               │ two sumdb...                                                │
│                  │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56865                  │
└──────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes
@renovate-approve-2 renovate-approve-2[bot] renovate-approve-2[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

task list
Status: In Progress

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants