Skip to content

chore(deps): bump github.com/gin-contrib/cors from 1.4.0 to 1.7.8 in /services/api-gateway - #250

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/services/api-gateway/github.com/gin-contrib/cors-1.7.8
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/services/api-gateway/github.com/gin-contrib/cors-1.7.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/gin-contrib/cors from 1.4.0 to 1.7.8.

Release notes

Sourced from github.com/gin-contrib/cors's releases.

v1.7.8

Changelog

Bug fixes

  • 1c8f3f2f0f68297cd37088446f268e78f08c4a0b: fix(lint): address golangci-lint v2.12 findings (@​appleboy)
  • 7f95eade2fa15bc5e0ab952cc19d4d9cd28e94c6: fix(lint): apply gofmt to formatted files (@​appleboy)
  • b13f591526573acfd58903a66a8a844a5b9dec44: fix(lint): exclude goconst on test files (@​appleboy)
  • 4e1524ae2f510288f6dce005459650282e7e4186: fix(lint): address remaining v2.12 lint findings (@​appleboy)

Enhancements

  • 61b6b000d8b16efb32c7ca14f6e5138b3ee88f24: chore(deps): upgrade quic-go to v0.59.1 (@​appleboy)
  • 88fbadf27cd0609f41fa702dbc69ec2927abca05: chore(deps): upgrade golang.org/x/crypto and x/net (@​appleboy)
  • 7f392d4cd038d42cfccab4b9fc2f880d8a7de33d: chore(deps): update dependencies and bump GitHub Actions (@​appleboy)
  • efab1d5ff7640fefc6aab181c1d00970d9f09467: chore(deps): upgrade golang.org/x/crypto to v0.55.0 (#194) (@​appleboy)

Build process updates

  • b129b0826f0c9222fd39e69cccc6ce4d0d3151b1: ci(actions): bump codecov/codecov-action from v5 to v6 (@​appleboy)
  • 63b00e562c4616f43a2a6e662550d4414884b28c: ci(workflow): pin trivy-action to v0.35.0 tag (@​appleboy)
  • 13a0f79d155921f368fb535a61d3cd6e6299ca50: ci(workflow): bump trivy-action from v0.35.0 to v0.36.0 (@​appleboy)
  • d0f8eed197ff53ba204f859f9dec0cba154a4833: ci(lint): bump golangci-lint to v2.12 (@​appleboy)
  • fded0852afe5d4ddb9be579024bc1dca18c4a00f: ci(actions): bump codecov/codecov-action from v6 to v7 (@​appleboy)
  • 76760d429f678924826c7bd4cb013f65fd776151: ci(actions): bump actions/checkout from v6 to v7 (@​appleboy)
  • 2046b62b7011499e5e127d8632ffd29d83a75e62: ci(actions): update Go test matrix (#193) (@​appleboy)

Documentation updates

  • 53b098dbdc2a59443ab937080ac804acaf8df508: docs(readme): remove Go Report Card badge (@​appleboy)
  • e9487ec41432e4a669cdc36820b402ba569fd196: docs(readme): replace deprecated godoc.org links with pkg.go.dev (@​appleboy)

v1.7.7

Changelog

Others

  • 2816d6da1754dae141f65310dfbf4a1600af782a: Add Go 1.26 to GitHub Actions test matrix (@​appleboy)
  • a92928f098c146faaa5e691399c0ab3c2b808d2f: Update golangci-lint version to v2.9 (@​appleboy)
  • b77776e77f9daaf63076e696016cf99340cdc79e: Fix Trivy badge URL in README.md (@​appleboy)

Bug fixes

  • 123928c03ce0b7336b4322d38d57bf7cf4e9b808: fix: allow ^ anchor in regex CORS origin patterns (#177) (@​brokenthumbs)
  • 3585a5e62daa3d1b40e134b6d2a8bf07b33b2d57: fix: resolve golangci-lint issues in tests (@​appleboy)

Enhancements

  • 21c982fe706deec13d8012eb66b8feaed5c1acd2: chore: update Go version and refresh dependencies to latest releases (@​appleboy)
  • 402233a7419c785098703756402484dae63f4417: chore(deps): upgrade golang.org/x/crypto to v0.45.0 (@​appleboy)
  • 0c142794c2885f61c16db122c343da553801a9dd: chore(deps): bump actions/checkout from 4 to 6 (@​appleboy)
  • 3333b3d0d3ff5d3d6e5f715665a0920522e091ea: chore(deps): upgrade quic-go to v0.57.1 (@​appleboy)
  • 754ef53f194ecb7faa198ca6c9365b8975217aba: chore(ci): update golangci-lint to v2.6 (@​appleboy)
  • c5dcea89610356ca36bd8bd2534943105f731b20: chore(deps): bump actions/cache from 4 to 5 (@​appleboy)
  • 139173a220a23bae1172280cfaaf86addd2c5248: chore(ci): upgrade trivy-action from 0.33.1 to 0.35.0 (@​appleboy)
  • 9e6ec27fa96936d68a516d5367486e262812275b: chore(deps): upgrade gin to v1.12.0 and update CI Go versions (@​appleboy)
  • e19d20de2b561cdd642ed336fcca368fd8e251cf: chore(deps): upgrade golang.org/x/text to v0.35.0 (@​appleboy)

Build process updates

  • f46b87eacdb9f84a99136501d3e50873b9ebdb7a: ci: integrate Trivy vulnerability scanning into CI workflow (@​appleboy)
  • c4b4ccff788f6a1ec0d796054d870f1a432b4193: ci: broaden CI Go version testing (@​appleboy)
  • 33f131c7e60abbda06621e3db880ea3b87200c59: ci: add dedicated Trivy security scanning and status badge (@​appleboy)
  • fe8e9d050af48828d10c39a76c03b0ca91cf1061: ci: integrate automated Trivy security scanning via GitHub Actions (@​appleboy)
  • f20e310cdc56e1eabc1a247230e073cc11c1f134: ci: update CI tooling and refine supported Go versions (@​appleboy)
  • d94e4773a2a44fc8c0738ad4fa77d82dc7f57c5f: ci: modernize and consolidate CI workflows and security scanning (@​appleboy)

... (truncated)

Commits
  • efab1d5 chore(deps): upgrade golang.org/x/crypto to v0.55.0 (#194)
  • 2046b62 ci(actions): update Go test matrix (#193)
  • e9487ec docs(readme): replace deprecated godoc.org links with pkg.go.dev
  • 53b098d docs(readme): remove Go Report Card badge
  • 7f392d4 chore(deps): update dependencies and bump GitHub Actions
  • 88fbadf chore(deps): upgrade golang.org/x/crypto and x/net
  • 76760d4 ci(actions): bump actions/checkout from v6 to v7
  • 61b6b00 chore(deps): upgrade quic-go to v0.59.1
  • fded085 ci(actions): bump codecov/codecov-action from v6 to v7
  • 4e1524a fix(lint): address remaining v2.12 lint findings
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors) from 1.4.0 to 1.7.8.
- [Release notes](https://github.com/gin-contrib/cors/releases)
- [Commits](gin-contrib/cors@v1.4.0...v1.7.8)

---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
  dependency-version: 1.7.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 15, 2026
@github-actions

Copy link
Copy Markdown

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

@github-actions

Copy link
Copy Markdown

SBOM Security Report

Total Packages: 3276

Language Distribution:

  • go: 324
  • javascript: 1987
  • rust: 654
  • python: 4

License Distribution:

  • MIT: 1374
  • Apache-2.0: 44
  • BSD-3-Clause: 45
  • CC0-1.0: 43
  • ISC: 85
  • BSD-2-Clause: 40
  • Python-2.0: 1
  • MPL-2.0: 1
  • Unlicense: 3
  • CC-BY-4.0: 1
  • (Apache-2.0 OR MPL-1.1): 1
  • BlueOak-1.0.0: 3
  • (AFL-2.1 OR BSD-3-Clause): 1
  • (BSD-3-Clause OR GPL-2.0): 1
  • (MIT AND Zlib): 1
  • (MIT AND BSD-3-Clause): 1
  • 0BSD: 4
  • (MIT OR CC0-1.0): 3
  • MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found

@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #260.

@dependabot dependabot Bot closed this Sep 29, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/services/api-gateway/github.com/gin-contrib/cors-1.7.8 branch September 29, 2026 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants