Skip to content

fix: security issue in go-pg#3885

Merged
dd-mergequeue[bot] merged 1 commit into
mainfrom
hannahkm/fix-go-pg
Aug 18, 2025
Merged

fix: security issue in go-pg#3885
dd-mergequeue[bot] merged 1 commit into
mainfrom
hannahkm/fix-go-pg

Conversation

@hannahkm

@hannahkm hannahkm commented Aug 18, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

What does this PR do?

Upgrades go-pg to v10.15.0

Motivation

https://github.com/DataDog/dd-trace-go/security/dependabot/296

Reviewer's Checklist

  • Changed code has unit tests for its functionality at or near 100% coverage.
  • System-Tests covering this feature have been added and enabled with the va.b.c-dev version tag.
  • There is a benchmark for any new code, or changes to existing code.
  • If this interacts with the agent in a new way, a system test has been added.
  • New code is free of linting errors. You can check this by running ./scripts/lint.sh locally.
  • Add an appropriate team label so this PR gets put in the right place for the release notes.
  • Non-trivial go.mod changes, e.g. adding new modules, are reviewed by @DataDog/dd-trace-go-guild.

Unsure? Have a question? Request a review!

@github-actions github-actions Bot added the apm:ecosystem contrib/* related feature requests or bugs label Aug 18, 2025
@hannahkm
hannahkm marked this pull request as ready for review August 18, 2025 16:32
@hannahkm

hannahkm commented Aug 18, 2025

Copy link
Copy Markdown
Contributor Author

/merge

@dd-devflow-routing-codex

dd-devflow-routing-codex Bot commented Aug 18, 2025 •
edited
Loading

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2025-08-18 16:50:19 UTC ℹ️ Start processing command /merge

2025-08-18 16:50:34 UTC ℹ️ MergeQueue: waiting for PR to be ready

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

2025-08-18 16:52:31 UTC ℹ️ MergeQueue: merge request added to the queue

The expected merge time in main is approximately 14m (p90).

2025-08-18 17:03:13 UTC ℹ️ MergeQueue: This merge request was merged

@dd-mergequeue
dd-mergequeue Bot merged commit 6d45b47 into main Aug 18, 2025
247 checks passed
@dd-mergequeue
dd-mergequeue Bot deleted the hannahkm/fix-go-pg branch August 18, 2025 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@darccio darccio darccio approved these changes

Assignees

No one assigned

Labels

apm:ecosystem contrib/* related feature requests or bugs mergequeue-status: done

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hannahkm @darccio