Bump github.com/kubescape/storage from 0.0.166 to 0.2.0 #2719
Conversation
Kusari Analysis Results:
Both dependency and code security analyses show zero critical security issues, making this dependabot update safe to merge. The dependency analysis confirms no security vulnerabilities across all dependencies with permissive licensing, while the code analysis shows clean results for vulnerabilities, secrets, and workflow security. The main update to github.com/kubescape/storage v0.2.0 comes from a well-maintained project and beneficially simplifies the dependency tree by removing multiple OpenTelemetry and logging dependencies. The only identified concern is a maintenance consideration with github.com/mattn/go-sqlite3 being slightly behind the latest version, but this represents a future monitoring item rather than an immediate security risk. Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
This pull request has been automatically marked as stale because it has not had recent activity (60 days of inactivity). |
|
@dependabot rebase |
32eb074 to
1b297bf
Compare
|
Kusari PR Analysis rerun based on - 1b297bf performed at: 2025-09-06T16:55:27Z - link to updated analysis |
|
@dependabot rebase |
1b297bf to
6c672d3
Compare
|
Kusari PR Analysis rerun based on - 6c672d3 performed at: 2025-09-17T16:15:34Z - link to updated analysis |
|
@dependabot rebase |
Bumps [github.com/kubescape/storage](https://github.com/kubescape/storage) from 0.0.166 to 0.2.0. - [Release notes](https://github.com/kubescape/storage/releases) - [Commits](https://github.com/kubescape/storage/commits) --- updated-dependencies: - dependency-name: github.com/kubescape/storage dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
6c672d3 to
0878402
Compare
|
Kusari PR Analysis rerun based on - 0878402 performed at: 2025-09-17T23:43:50Z - link to updated analysis |
Bumps github.com/kubescape/storage from 0.0.166 to 0.2.0.
Release notes
Sourced from github.com/kubescape/storage's releases.
... (truncated)
Commits
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)