chore(deps): bump k8s.io/apimachinery from 0.35.3 to 0.36.3 · ctfer-io/chall-manager@ebe5d59

Triggered via pull request August 14, 2026 08:18

synchronize #1436

Status Failure

Total duration 3m 47s

Artifacts –

prs.yaml

on: pull_request

1 error and 10 warnings

Dependency review detected vulnerable packages.

gomod/github.com/erikgeiser/coninput has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/lukechampine.com/frand has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/github.com/xo/terminfo has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/github.com/xhit/go-str2duration/v2 has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

gomod/github.com/pgavlin/fx/v2 has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

gomod/github.com/erikgeiser/coninput has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/lukechampine.com/frand has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/github.com/xo/terminfo has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

gomod/github.com/pgavlin/fx/v2 has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

gomod/github.com/erikgeiser/coninput has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.