chore(deps): update module github.com/skeema/knownhosts to v1.3.2 by renovate-sh-app[bot] · Pull Request #364 · grafana/nanogit

renovate-sh-app · 2026-06-23T13:18:51Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/skeema/knownhosts	`v1.3.1` → `v1.3.2`

Release Notes

skeema/knownhosts (github.com/skeema/knownhosts)

`v1.3.2`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

renovate-sh-app · 2026-06-23T13:18:55Z

ℹ️ Artifact update notice

File name: perf/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`github.com/ProtonMail/go-crypto`	`v1.1.6` -> `v1.4.1`
`golang.org/x/crypto`	`v0.52.0` -> `v0.53.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.21.0`
`golang.org/x/sys`	`v0.45.0` -> `v0.46.0`

github-actions · 2026-06-23T13:19:57Z

⚠️ The workflow jobs listed below don't declare a permissions: block and may break when the organization's default GITHUB_TOKEN permissions are restricted to read-only.

Expand for findings

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:1:1
    |
  1 | / name: CI
  2 | |
  3 | | on:
  4 | |   push:
...   |
494 | |       - name: Run CLI linter
495 | |         run: make cli-lint
    | |___________________________^ default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:14:3
   |
14 | /   generate:
15 | |     name: Generated Files
16 | |     runs-on: ubuntu-latest
17 | |     container:
...  |
32 | |             exit 1
33 | |           fi
   | |            ^
   | |            |
   | |____________this job
   |              default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:35:3
   |
35 | /   format:
36 | |     name: Format
37 | |     runs-on: ubuntu-latest
38 | |     container:
...  |
51 | |             exit 1
52 | |           fi
   | |            ^
   | |            |
   | |____________this job
   |              default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:54:3
   |
54 | /   lint:
55 | |     name: Lint
56 | |     runs-on: ubuntu-latest
57 | |     container:
...  |
63 | |       - name: Run linter
64 | |         run: make lint
   | |                      ^
   | |                      |
   | |______________________this job
   |                        default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:66:3
   |
66 | /   test-unit:
67 | |     name: Unit Tests
68 | |     runs-on: ubuntu-latest
69 | |     container:
...  |
89 | |           CGO_ENABLED: 1
90 | |         run: make test-unit
   | |                           ^
   | |                           |
   | |___________________________this job
   |                             default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:134:3
    |
134 | /   test-integration:
135 | |     name: Integration Tests
136 | |     runs-on: ubuntu-latest
137 | |     container:
...   |
157 | |           CGO_ENABLED: 1
158 | |         run: make test-integration
    | |                                  ^
    | |                                  |
    | |__________________________________this job
    |                                    default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:330:3
    |
330 | /   security:
331 | |     name: Security
332 | |     runs-on: ubuntu-latest
333 | |     container:
...   |
341 | |           go install golang.org/x/vuln/cmd/govulncheck@latest
342 | |           govulncheck ./...
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:344:3
    |
344 | /   trufflehog:
345 | |     name: Secrets Scan
346 | |     runs-on: ubuntu-latest
347 | |     steps:
...   |
353 | |         with:
354 | |           extra_args: --results=verified,unknown --exclude-globs='protocol/signing/testsigning/**'
    | |                                                                                                  ^
    | |                                                                                                  |
    | |__________________________________________________________________________________________________this job
    |                                                                                                    default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:356:3
    |
356 | /   deps:
357 | |     name: Dependencies
358 | |     runs-on: ubuntu-latest
359 | |     container:
...   |
375 | |           go install github.com/remyoudompheng/go-misc/deadcode@latest
376 | |           deadcode ./... || true
    | |                                ^
    | |                                |
    | |________________________________this job
    |                                  default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:378:3
    |
378 | /   staticcheck:
379 | |     name: Static Analysis
380 | |     runs-on: ubuntu-latest
381 | |     container:
...   |
389 | |           go install honnef.co/go/tools/cmd/staticcheck@latest
390 | |           staticcheck ./...
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:392:3
    |
392 | /   test-clone-perf:
393 | |     name: Clone Performance Tests
394 | |     runs-on: ubuntu-latest
395 | |     container:
...   |
415 | |           cd perf
416 | |           make test-clone-perf
    | |                              ^
    | |                              |
    | |______________________________this job
    |                                default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:418:3
    |
418 | /   test-clone-perf-full:
419 | |     name: Full Clone Performance Test (1 minute limit)
420 | |     runs-on: ubuntu-latest
421 | |     container:
...   |
445 | |           echo "Test will FAIL if clone takes more than 60 seconds"
446 | |           go test -v -timeout 1m -run TestCloneGrafanaGrafanaFullRepository .
    | |                                                                             ^
    | |                                                                             |
    | |_____________________________________________________________________________this job
    |                                                                               default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:448:3
    |
448 | /   cli-build:
449 | |     name: CLI Build
450 | |     runs-on: ubuntu-latest
451 | |     container:
...   |
463 | |           test -f bin/nanogit || (echo "Binary not found" && exit 1)
464 | |           ./bin/nanogit --version
    | |                                 ^
    | |                                 |
    | |_________________________________this job
    |                                   default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:466:3
    |
466 | /   cli-format:
467 | |     name: CLI Format
468 | |     runs-on: ubuntu-latest
469 | |     container:
...   |
482 | |             exit 1
483 | |           fi
    | |            ^
    | |            |
    | |____________this job
    |              default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:485:3
    |
485 | /   cli-lint:
486 | |     name: CLI Lint
487 | |     runs-on: ubuntu-latest
488 | |     container:
...   |
494 | |       - name: Run CLI linter
495 | |         run: make cli-lint
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

| datasource | package | from | to | | ---------- | ---------------------------- | ------ | ------ | | go | github.com/skeema/knownhosts | v1.3.1 | v1.3.2 | Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

codecov-commenter · 2026-07-03T13:23:18Z

Codecov Report

Caution

This repository is currently using the Sentry GitHub App to receive Codecov PR comments. This integration will be deprecated on July 8, 2026. Please install the Codecov GitHub App to continue receiving coverage reports on your pull requests.
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.34%. Comparing base (ec8c5c9) to head (43b3d23).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #364      +/-   ##
==========================================
- Coverage   72.37%   72.34%   -0.03%     
==========================================
  Files          59       59              
  Lines        7391     7391              
==========================================
- Hits         5349     5347       -2     
- Misses       1634     1636       +2     
  Partials      408      408

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate-sh-app Bot added the update-patch label Jun 23, 2026

renovate-sh-app Bot requested a review from a team as a code owner June 23, 2026 13:18

renovate-sh-app Bot added the update-patch label Jun 23, 2026

renovate-sh-app Bot requested review from amalavet and stevesg and removed request for a team June 23, 2026 13:18

renovate-sh-app Bot changed the title ~~chore(deps): update module github.com/skeema/knownhosts to v1.3.2~~ chore(deps): update module github.com/skeema/knownhosts to v1.3.2 - autoclosed Jun 28, 2026

renovate-sh-app Bot closed this Jun 28, 2026

renovate-sh-app Bot deleted the renovate/github.com-skeema-knownhosts-1.x branch June 28, 2026 07:11

renovate-sh-app Bot changed the title ~~chore(deps): update module github.com/skeema/knownhosts to v1.3.2 - autoclosed~~ chore(deps): update module github.com/skeema/knownhosts to v1.3.2 Jul 3, 2026

renovate-sh-app Bot reopened this Jul 3, 2026

renovate-sh-app Bot force-pushed the renovate/github.com-skeema-knownhosts-1.x branch 2 times, most recently from 472032b to 43b3d23 Compare July 3, 2026 13:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update module github.com/skeema/knownhosts to v1.3.2#364

chore(deps): update module github.com/skeema/knownhosts to v1.3.2#364
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-skeema-knownhosts-1.x

renovate-sh-app Bot commented Jun 23, 2026 •

edited

Loading

Uh oh!

renovate-sh-app Bot commented Jun 23, 2026

Uh oh!

github-actions Bot commented Jun 23, 2026

Uh oh!

codecov-commenter commented Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate-sh-app Bot commented Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.3.2

Configuration

Need help?

Uh oh!

renovate-sh-app Bot commented Jun 23, 2026

ℹ️ Artifact update notice

File name: perf/go.mod

Uh oh!

github-actions Bot commented Jun 23, 2026

Uh oh!

codecov-commenter commented Jul 3, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate-sh-app Bot commented Jun 23, 2026 •

edited

Loading

`v1.3.2`