Skip to content

chore(deps): bump github.com/docker/cli from 28.3.3+incompatible to 29.2.0+incompatible in /services/apps/git_integration/src/crowdgit/services/vulnerability_scanner - #3939

Merged
joanagmaia merged 2 commits into
mainfrom
dependabot/go_modules/services/apps/git_integration/src/crowdgit/services/vulnerability_scanner/github.com/docker/cli-29.2.0incompatible
Sep 22, 2026
Merged

chore(deps): bump github.com/docker/cli from 28.3.3+incompatible to 29.2.0+incompatible in /services/apps/git_integration/src/crowdgit/services/vulnerability_scanner#3939
joanagmaia merged 2 commits into
mainfrom
dependabot/go_modules/services/apps/git_integration/src/crowdgit/services/vulnerability_scanner/github.com/docker/cli-29.2.0incompatible

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/docker/cli from 28.3.3+incompatible to 29.2.0+incompatible.

Commits
  • 0b9d198 Merge pull request #6764 from vvoland/update-docker
  • 9c9ec73 vendor: github.com/moby/moby/client v0.2.2
  • bab3e81 vendor: github.com/moby/moby/api v1.53.0
  • 2e64fc1 Merge pull request #6367 from thaJeztah/template_slicejoin
  • 1f2ba2a Merge pull request #6760 from thaJeztah/container_create_fix_error
  • e34a342 templates: make "join" work with non-string slices and map values
  • a86356d Merge pull request #6763 from thaJeztah/bump_mapstructure
  • 771660a vendor: github.com/go-viper/mapstructure/v2 v2.5.0
  • 9cff36b Merge pull request #6762 from thaJeztah/bump_x_deps
  • 08ed2bc cli/command/container: make injecting config.json failures a warning
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Low Risk
Low risk dependency-only change; primary impact is potential build/runtime incompatibility from upgrading github.com/docker/cli and adjusting module requirements.

Overview
Updates the vulnerability-scanner Go module to use github.com/docker/cli v29.2.0 (from v28.3.3) and refreshes go.sum accordingly.

Also promotes github.com/ossf/osv-schema/bindings/go from an indirect dependency to a direct require, making it an explicit module dependency.

Written by Cursor Bugbot for commit f3f0e93. This will update automatically on new commits. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
chore(deps): bump github.com/docker/cli
f3f0e93 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from 28.3.3+incompatible to 29.2.0+incompatible.
- [Commits](docker/cli@v28.3.3...v29.2.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.2.0+incompatible
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 20, 2026
@github-actions

github-actions Bot commented Mar 20, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

@CLAassistant

CLAassistant commented Mar 20, 2026 •
edited
Loading

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ joanagmaia
❌ dependabot[bot]
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions

github-actions Bot commented Mar 20, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

1 similar comment
@github-actions

github-actions Bot commented Mar 20, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

@joanagmaia
joanagmaia requested a review from epipav March 23, 2026 16:45
@joanagmaia
joanagmaia removed the request for review from epipav April 6, 2026 14:15
@github-actions

github-actions Bot commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

@joanagmaia
Merge remote-tracking branch 'origin/main' into dependabot/go_modules…
db99535 
…/services/apps/git_integration/src/crowdgit/services/vulnerability_scanner/github.com/docker/cli-29.2.0incompatible

Signed-off-by: Joana Maia <jmaia@contractor.linuxfoundation.org>
@cursor

cursor Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Low Risk
Lockfile-only indirect dependency bump with no code changes; verify builds/tests for the vulnerability_scanner module if not already run in CI.

Overview
Updates the vulnerability-scanner Go module’s indirect dependency github.com/docker/cli from 28.3.3 to 29.2.0, with matching go.sum checksum entries. No application source changes—only dependency metadata for the git integration vulnerability scanner service.

Reviewed by Cursor Bugbot for commit db99535. Bugbot is set up for automated code reviews on this repo. Configure here.

@joanagmaia
joanagmaia self-requested a review September 22, 2026 13:17
@joanagmaia
joanagmaia merged commit 7d0f086 into main Sep 22, 2026
13 checks passed
@joanagmaia
joanagmaia deleted the dependabot/go_modules/services/apps/git_integration/src/crowdgit/services/vulnerability_scanner/github.com/docker/cli-29.2.0incompatible branch September 22, 2026 13:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@joanagmaia joanagmaia joanagmaia approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@CLAassistant @joanagmaia