build(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.22

[dependabot]

Bumps github.com/mattn/go-isatty from 0.0.20 to 0.0.22.

Commits

• 9a68506 Fix isCygwinPipeName to accept Windows 7 trailing suffix (#90)
• 4237fb1 Update Go test matrix to current versions (1.24-1.26)
• 433c12b Update GitHub Actions to latest versions
• 1cf5589 Add wasip1 and wasip2 to build constraints in isatty_others.go
• 1237245 Update dependencies: go 1.15 -> 1.21, golang.org/x/sys v0.6.0 -> v0.28.0
• ac9c88d Fix typo in comment: undocomented -> undocumented
• 8b7124e Add availability check for NtQueryObject in init
• 08d0313 Fix isCygwinPipeName to reject names with extra trailing tokens
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔒 Security Scan Results

Found 26 issues (🔴 18 high · 🟠 8 medium · 🟡 0 low).

Findings

Severity	Rule	File:Line	Message
🔴 HIGH	G115 (CWE-190)	internal/coordinator/scheduler.go:257	integer overflow conversion int -> int32
🔴 HIGH	G115 (CWE-190)	internal/coordinator/store_pebble.go:76	integer overflow conversion int -> uint64
🔴 HIGH	G115 (CWE-190)	internal/engine/state_backend_hashmap.go:301	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/engine/state_backend_hashmap.go:306	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/engine/state_backend_hashmap.go:310	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/engine/state_backend_hashmap.go:345	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/keygroup/assignment.go:44	integer overflow conversion int -> uint16
🔴 HIGH	G115 (CWE-190)	internal/keygroup/assignment.go:45	integer overflow conversion int -> uint16
🔴 HIGH	G115 (CWE-190)	internal/keygroup/hasher.go:8	integer overflow conversion uint32 -> uint16
🔴 HIGH	G115 (CWE-190)	internal/keygroup/hasher.go:8	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/protocol/frame.go:112	integer overflow conversion int -> uint32
🔴 HIGH	G404 (CWE-338)	internal/rpc/client.go:211	Use of weak random number generator (math/rand or math/rand/v2 instead of crypto/rand)
🔴 HIGH	G115 (CWE-190)	internal/rpc/codec.go:117	integer overflow conversion int -> uint32
🔴 HIGH	G115 (CWE-190)	internal/worker/worker.go:246	integer overflow conversion int -> int32
🔴 HIGH	G115 (CWE-190)	internal/worker/worker.go:256	integer overflow conversion int -> int32
🔴 HIGH	G115 (CWE-190)	sdk/graph_converter.go:30	integer overflow conversion int -> int32
🔴 HIGH	G115 (CWE-190)	sdk/partition_router.go:39	integer overflow conversion uint64 -> int
🔴 HIGH	G115 (CWE-190)	sdk/partition_router.go:39	integer overflow conversion int -> uint64
🟠 MEDIUM	G302 (CWE-276)	cmd/main.go:52	Expect file permissions to be 0600 or less
🟠 MEDIUM	G301 (CWE-276)	internal/coordinator/election_filelock.go:38	Expect directory permissions to be 0750 or less
🟠 MEDIUM	G302 (CWE-276)	internal/coordinator/election_filelock.go:53	Expect file permissions to be 0600 or less
🟠 MEDIUM	G304 (CWE-22)	internal/coordinator/election_filelock.go:135	Potential file inclusion via variable
🟠 MEDIUM	G306 (CWE-276)	internal/coordinator/election_filelock.go:143	Expect WriteFile permissions to be 0600 or less
🟠 MEDIUM	G301 (CWE-276)	internal/coordinator/store_memory.go:132	Expect directory permissions to be 0750 or less
🟠 MEDIUM	G306 (CWE-276)	internal/coordinator/store_memory.go:149	Expect WriteFile permissions to be 0600 or less

…and 1 more. Full SARIF report on the repo's Security tab.