build(deps): bump golang from 1.25.12-alpine to 1.27.1-alpine - #18

Open

dependabot[bot] wants to merge 1 commit into

mainfrom

dependabot/docker/golang-1.27.1-alpine

Annotations

10 errors and 1 warning

Vulnerability scan

lethe.Client.doRequest calls http.Client.Do

Vulnerability scan

ledger.Service.Record calls sql.Conn.ExecContext, which eventually calls asn1.Unmarshal

Vulnerability scan

server.Start calls http.Server.Serve

Vulnerability scan

lethe.Client.doRequest calls http.Client.Do, which eventually calls tls.Dialer.DialContext

Vulnerability scan

metrics.Expose calls fmt.Fprintf, which calls tls.Conn.Write

Vulnerability scan

reconcile.identifyDB calls io.Copy, which eventually calls tls.Conn.Read

Vulnerability scan

server.Start calls http.Server.Serve, which eventually calls tls.Conn.HandshakeContext

Vulnerability scan

oauth.renderAuthorizationPage calls template.Template.Execute

Vulnerability scan

mcp.init calls server.init, which eventually calls url.URL.ResolveReference

Vulnerability scan

lethe.Client.doRequest calls http.Client.Do, which eventually calls url.URL.Parse

Complete job

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/