Skip to content

chore(deps): bump github.com/github/go-spdx/v2 from 2.7.0 to 2.7.1 in the go-deps group - #38

Merged
bfabio merged 1 commit into
mainfrom
dependabot/go_modules/go-deps-07db55cdae
Oct 21, 2026
Merged

bfabio merged 1 commit into
mainfrom
dependabot/go_modules/go-deps-07db55cdae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 1 update: github.com/github/go-spdx/v2.

Updates github.com/github/go-spdx/v2 from 2.7.0 to 2.7.1

Release notes

Sourced from github.com/github/go-spdx/v2's releases.

Release 2.7.1

Overview

Limited to new license, bug fixes, and dependabot updates.

What's Changed

Licenses:

  • license updates (#160)

Bug fixes:

Dependabot:

  • Add supply chain security defaults - dependabot cooldown (#151) @​claire153
  • several dependabot updates

Full Changelog: github/go-spdx@v2.7.0...v2.7.1

Commits
  • 065aa3f Merge pull request #168 from github/elr/nil-panic
  • 4c59ece Catch open parenthesis with no following tokens
  • 0e6bf86 Merge pull request #160 from github/auto-update-licenses
  • 31bf003 Add updated license files
  • b18d8c0 Merge pull request #157 from github/dependabot/github_actions/golangci/golang...
  • 4a38e14 Merge pull request #164 from github/pinner/actions-sha-pins-2026-09-10
  • 5f873f4 Merge branch 'main' into pinner/actions-sha-pins-2026-09-10
  • ec76d72 Update GitHub Actions to use newer action versions
  • d9743b3 Upgrade actions/checkout and actions/setup-go versions
  • 5d050a1 Merge pull request #167 from github/elr/or-ref
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 1 update: [github.com/github/go-spdx/v2](https://github.com/github/go-spdx).


Updates `github.com/github/go-spdx/v2` from 2.7.0 to 2.7.1
- [Release notes](https://github.com/github/go-spdx/releases)
- [Commits](github/go-spdx@v2.7.0...v2.7.1)

---
updated-dependencies:
- dependency-name: github.com/github/go-spdx/v2
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 21, 2026
@bfabio
bfabio merged commit 3222a3b into main Oct 21, 2026
10 checks passed
@bfabio
bfabio deleted the dependabot/go_modules/go-deps-07db55cdae branch October 21, 2026 09:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant