oss/forgejo
oss/forgejo
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-06-27 16:35:57 +00:00
Code Wiki Activity

[v7.0/forgejo] chore: rely on renovate for security checks (#7676)

Browse source 
There is no way to silence vulncheck when there is a non-relevant
security error (https://github.com/golang/go/issues/61211).

This is problematic when fixing such an error would require upgrading
a large amount of dependencies, for instance in the case of

https://github.com/ClickHouse/ch-go/security/advisories/GHSA-m454-3xv7-qj85

which is only ever relevant for testing and not production in the
context of Forgejo.

Now that renovate is used for stable branches, it can be used as an
alternative. It will propose relevant security updates by default and
it will also be possible to decline them if they do not matter.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7676
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
This commit is contained in:
Earl Warren 2025-04-27 12:40:00 +00:00 • committed by Earl Warren
parent 79f43238bd
commit d5f71a15f3
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Makefile
View file

@ -382,7 +382,7 @@ checks: checks-frontend checks-backend
checks-frontend: lockfile-check svg-check
.PHONY: checks-backend
checks-backend: tidy-check swagger-check fmt-check swagger-validate security-check
checks-backend: tidy-check swagger-check fmt-check swagger-validate
.PHONY: lint
lint: lint-frontend lint-backend lint-spell