Skip to content

Replace Go module Dependabot with govulncheck - #209

Open
DTLP wants to merge 2 commits into
masterfrom
dl-govulncheck
Open

Replace Go module Dependabot with govulncheck#209
DTLP wants to merge 2 commits into
masterfrom
dl-govulncheck

Conversation

@DTLP

@DTLP DTLP commented Aug 6, 2026

Copy link
Copy Markdown
Contributor
  • Update Go to v1.26
  • Update dependencies
  • Pin GOTOOLCHAIN version
  • Pin alpine to v3.24
  • Migrate S3 store writer to aws-sdk-go-v2

- Update Go to v1.26
- Update dependencies
- Pin GOTOOLCHAIN version
- Pin alpine to v3.24
gocloud.dev's s3blob.OpenBucket now requires an aws-sdk-go-v2 *s3.Client
instead of a v1 *session.Session, which broke the go-tests "latest deps"
canary job. Switch to config.LoadDefaultConfig + s3.NewFromConfig with
OpenBucketV2, which works against both the currently locked gocloud.dev
version and newer ones.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@DTLP
DTLP marked this pull request as ready for review August 7, 2026 08:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant