chore(deps): bump actions/setup-go from 6 to 7 by dependabot[bot] · Pull Request #293 · atlascloud/packages

dependabot · 2026-07-17T00:22:26Z

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-go#763

chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in actions/setup-go#771

New Contributors

@philip-gai made their first contribution in actions/setup-go#771

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

Upgrade actions dependencies by @priyagupta108 with @Copilot in actions/setup-go#744

Upgrade @types/node and typescript-eslint dependencies to resolve npm audit findings by @HarithaVattikuti in actions/setup-go#755

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-go#758

Upgrade version to 6.5.0 in package.json and package-lock.json by @HarithaVattikuti in actions/setup-go#762

New Contributors

@priyagupta108 with @Copilot made their first contribution in actions/setup-go#744

@jasongin made their first contribution in actions/setup-go#758

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in actions/setup-go#721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-go#727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in actions/setup-go#724

Fix Microsoft build of Go link by @gdams in actions/setup-go#734

New Contributors

@gdams made their first contribution in actions/setup-go#721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in actions/setup-go#705

Fix golang download url to go.dev by @178inaba in actions/setup-go#469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

b7ad1da chore(deps): bump @actions/cache to 6.2.0 (#771)
0778a10 Migrate to ESM and upgrade dependencies (#763)
See full diff in compare view

github-actions · 2026-07-17T00:25:41Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0	0	0.02s
✅ API	spectral	2		0	0	1.94s
✅ COPYPASTE	jscpd	yes		no	no	1.33s
✅ DOCKERFILE	hadolint	1		0	0	0.13s
✅ GO	golangci-lint	yes	yes	no	no	50.68s
✅ GO	revive	yes		no	no	1.79s
✅ MARKDOWN	markdownlint	2	0	0	0	0.48s
✅ MARKDOWN	markdown-table-formatter	2	0	0	0	0.18s
✅ REPOSITORY	checkov	yes		no	no	48.58s
✅ REPOSITORY	gitleaks	yes		no	no	0.3s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
✅ REPOSITORY	grype	yes		no	no	75.57s
✅ REPOSITORY	secretlint	yes		no	no	0.41s
✅ REPOSITORY	syft	yes		no	no	4.13s
❌ REPOSITORY	trivy	yes		1	no	18.19s
✅ REPOSITORY	trivy-sbom	yes		no	no	4.88s
✅ REPOSITORY	trufflehog	yes		no	no	3.86s
✅ SPELL	lychee	14		0	0	0.06s
✅ YAML	prettier	12	0	0	0	0.63s
✅ YAML	v8r	12		0	0	7.16s
✅ YAML	yamllint	12		0	0	1.69s

Detailed Issues

❌ REPOSITORY / trivy - 1 error

2026-07-22T04:36:35Z	INFO	[vulndb] Need to update DB
2026-07-22T04:36:35Z	INFO	[vulndb] Downloading vulnerability DB...
2026-07-22T04:36:35Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
495.25 KiB / 101.24 MiB [>___________________________________________________________] 0.48% ? p/s ?13.53 MiB / 101.24 MiB [-------->___________________________________________________] 13.36% ? p/s ?37.45 MiB / 101.24 MiB [---------------------->_____________________________________] 36.99% ? p/s ?57.98 MiB / 101.24 MiB [-------------------------->____________________] 57.27% 95.65 MiB p/s ETA 0s73.61 MiB / 101.24 MiB [---------------------------------->____________] 72.71% 95.65 MiB p/s ETA 0s90.94 MiB / 101.24 MiB [------------------------------------------>____] 89.82% 95.65 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.13 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.13 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 94.13 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 88.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.38 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.38 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 82.38 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 77.06 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 72.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.44 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.44 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 67.44 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 63.09 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 59.02 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.21 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.21 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 55.21 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.65 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.65 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 51.65 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.32 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.32 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 48.32 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.20 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.20 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 45.20 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 42.28 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.56 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.56 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 39.56 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 37.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 37.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [-------------------------------------------->] 100.00% 37.00 MiB p/s ETA 0s101.24 MiB / 101.24 MiB [------------------------------------------------] 100.00% 10.00 MiB p/s 10s2026-07-22T04:36:46Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-07-22T04:36:46Z	INFO	[vuln] Vulnerability scanning is enabled
2026-07-22T04:36:46Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-07-22T04:36:46Z	INFO	[checks-client] Need to update the checks bundle
2026-07-22T04:36:46Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [---------------------------------------------] 100.00% 470.28 KiB p/s 700ms2026-07-22T04:36:52Z	INFO	Number of language-specific files	num=1
2026-07-22T04:36:52Z	INFO	[gomod] Detecting vulnerabilities...
2026-07-22T04:36:52Z	INFO	Detected config files	num=2
2026-07-22T04:36:52Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod           │   gomod    │        3        │         -         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile       │ dockerfile │        -        │         0         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile.local │ dockerfile │        -        │         0         │
└──────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 3 (UNKNOWN: 2, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌─────────────────────────────────────────┬─────────────────────┬──────────┬──────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│                 Library                 │    Vulnerability    │ Severity │  Status  │ Installed Version │ Fixed Version │                           Title                            │
├─────────────────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ github.com/oapi-codegen/oapi-codegen/v2 │ GHSA-rjwr-m7qx-3fjr │ LOW      │ fixed    │ v2.5.0            │ 2.7.1         │ oapi-codegen: OpenAPI Server Description Escapes Generated │
│                                         │                     │          │          │                   │               │ Go Comment and Injects Executable Code...                  │
│                                         │                     │          │          │                   │               │ https://github.com/advisories/GHSA-rjwr-m7qx-3fjr          │
├─────────────────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ golang.org/x/crypto                     │ GO-2026-5932        │ UNKNOWN  │ affected │ v0.53.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained,   │
│                                         │                     │          │          │                   │               │ unsafe by design, and has known security...                │
├─────────────────────────────────────────┼─────────────────────┤          ├──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ golang.org/x/text                       │ CVE-2026-56852      │          │ fixed    │ v0.38.0           │ 0.39.0        │ Infinite loop on invalid input in golang.org/x/text        │
│                                         │                     │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56852                 │
└─────────────────────────────────────────┴─────────────────────┴──────────┴──────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.72.0 of Trivy is now available, current version is 0.69.1

To suppress version checks, run Trivy scans with the --skip-version-check flag

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,API_SPECTRAL,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,GO_GOLANGCI_LINT,GO_REVIVE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v6...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned iggy Jul 17, 2026

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 17, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-go-7 branch from 03a3909 to e09c0b3 Compare July 22, 2026 04:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump actions/setup-go from 6 to 7 - #293

chore(deps): bump actions/setup-go from 6 to 7#293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-go-7

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

New Contributors

v6.5.0

What's Changed

Dependency update

New Contributors

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

v6.3.0

What's Changed

v6.2.0

What's Changed

Uh oh!

github-actions Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading

github-actions Bot commented Jul 17, 2026 •

edited

Loading