Skip to content

Bump actions/setup-go from 6.4.0 to 6.5.0 - #953

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-go-6.5.0
Closed

Bump actions/setup-go from 6.4.0 to 6.5.0#953
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-go-6.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-go from 6.4.0 to 6.5.0.

Release notes

Sourced from actions/setup-go's releases.

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4a36011...924ae3a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 7:46 AM UTC · Completed 7:54 AM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

Copy link
Copy Markdown

Review

Findings

High

  • [protected-path] .github/workflows/go-ci.yaml, .github/workflows/mpc-test.yaml, .github/workflows/test-e2e.yml — All changed files are under .github/, a protected path requiring human approval. This Dependabot PR bumps actions/setup-go from v6.4.0 to v6.5.0 (commit SHA pin update only, no behavioral changes). The change has no linked issue providing explicit authorization for modifying governance/infrastructure files.
    Remediation: A human reviewer with infrastructure approval authority should verify and approve this dependency update. No code changes are needed — the update itself is mechanical and safe.

Labels: Minor version bump of a GitHub Action dependency with no behavioral changes.

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

@fullsend-ai-review fullsend-ai-review Bot added semver/minor Semver minor version bump risk/low AI-assessed low risk dependency update labels Jun 29, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 30.17%. Comparing base (f2a6bf5) to head (24fcf96).

❗ There is a different number of reports uploaded between BASE (f2a6bf5) and HEAD (24fcf96). Click for more details.

HEAD has 3 uploads less than BASE
Flag BASE (f2a6bf5) HEAD (24fcf96)
unit-tests 2 0
e2e-tests 2 1
Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##             main     #953       +/-   ##
===========================================
- Coverage   76.92%   30.17%   -46.76%     
===========================================
  Files          26       26               
  Lines        2817     2817               
===========================================
- Hits         2167      850     -1317     
- Misses        452     1802     +1350     
+ Partials      198      165       -33     
Flag Coverage Δ
e2e-tests 30.17% <ø> (ø)
unit-tests ?

Flags with carried forward coverage won't be shown. Click here to find out more.
see 22 files with indirect coverage changes


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f2a6bf5...24fcf96. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #974.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/setup-go-6.5.0 branch July 20, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code risk/low AI-assessed low risk dependency update semver/minor Semver minor version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant