build(deps): update go-github

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/google/go-github/v53	require	major	v53.2.0 -> v55.0.0
github.com/palantir/go-githubapp	require	minor	v0.18.0 -> v0.19.0

---

Release Notes

google/go-github (github.com/google/go-github/v53)

v55.0.0

Compare Source

This release contains the following breaking API changes:

• Add missing fields to SecurityAdvisoryEvent and rename others (#​2889)

and the following additional changes:

• Bump go-github from v53 to v54 in /scrape (#​2882)
• Add support for enable/disable private vulnerability reporting on repositories (#​2887)
• Add support for organization, repository webhook configuration (#​2885)
• Return json.Unmarshal error when importing issues deferred (#​2892)
• Remove dependency on "golang.org/x/oauth2" (#​2895)
• Add support for dependabot_alert webhook event (#​2888)
• Fix merge issue from field renaming (#​2906)
• Add missing CodeScanning endpoints (#​2900)
• Update package constructors (#​2904)
• Fix serialization of repository_names conditions object (#​2910)
• Bump actions/checkout from 3 to 4 (#​2912)
• Bump version of go-github to v55.0.0 (#​2914)

v54.0.0

Compare Source

This release contains the following breaking API changes:

• Fix ListPullRequestsWithCommit option type (#​2822)
• Support repository_id in org ruleset conditions (#​2825)
• Fix repo rules bypass settings (#​2831)
• Fix old_name field in AuditEntry (#​2849)

and the following additional changes:

• Bump golang.org/x/net from 0.10.0 to 0.11.0 in /scrape (#​2814)
• Bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#​2812)
• Bump github.com/google/go-github/v53 from 53.0.0 to 53.2.0 in /scrape (#​2813)
• Add Runner to generate-jitconfig method (#​2818)
• Remove unnecessary use of fmt.Sprintf (#​2819)
• Use bytes.Equal instead of bytes.Compare (#​2820)
• Fix CreateOrUpdateOrgSecret regression introduced in v53 (#​2817)
• Add Repository struct to SecretScanningAlert (#​2823)
• Add support for personal access tokens request review API (#​2827)
• Add support for personal_access_token_request webhook event type (#​2826)
• Support line comments on PRs (#​2833)
• Implement installation_target webhook event type (#​2829)
• Add secret type display to secret scanning alert (#​2834)
• Use a sentinel error when blocking paths for RepositoriesServices.GetContents (#​2837)
• Add support for SAML SSO authorization APIs (#​2835)
• Bump golang.org/x/net from 0.11.0 to 0.12.0 in /scrape (#​2839)
• Bump golang.org/x/oauth2 from 0.9.0 to 0.10.0 (#​2840)
• Add Dependabot field in security_and_analysis (#​2846)
• Add new query params for AlertListOptions (#​2848)
• Add old_name field to AuditEntry (#​2843)
• Add OldLogin field to AuditEntryData (#​2850)
• Check for nil pointer in update rule parameters (#​2854)
• Fix dropped test error (#​2858)
• Bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 (#​2859)
• Bump golang.org/x/net from 0.12.0 to 0.14.0 in /scrape (#​2860)
• Add ListOptions pagination for Dependabot alerts (#​2853)
• Add support for Security Advisories Request CVE endpoint (#​2857)
• Add support for the security and analysis webhook event (#​2862)
• Add support for projects_v2 and projects_v2_item webhook events (#​2868)
• Defer closing body before checking HTTP status code (#​2870)
• Add GetAutomatedSecurityFixes to report status (#​2842)
• Adding missing field important to find branch in fork from same owner (#​2873)
• Add WorkflowRun and Workflow to DeploymentEvent (#​2755)
• Replace deprectated crypto/ssh/terminal module in examples (#​2876)
• Update workflow to use Go 1.21 and 1.20 (#​2878)
• Add TriggeringActor to WorkflowRun (#​2879)
• Add WebhookTypes and EventForType methods (#​2865)
• Add support for fetching SBOMs (#​2869)
• Add SubmoduleGitURL to RepositoryContent (#​2880)
• Bump version of go-github to v54.0.0 (#​2881)

palantir/go-githubapp (github.com/palantir/go-githubapp)

v0.19.0

Compare Source

• Upgrade google/go-github to v55 (https://github.com/palantir/go-githubapp/pull/288)
• Other minor dependency upgrades

---

Configuration

📅 Schedule: Branch creation - "on the 1st day of the month" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v "/tmp/worker/e42195/16bab0/repos/github/bangumi/github-bot":"/tmp/worker/e42195/16bab0/repos/github/bangumi/github-bot" -v "/tmp/worker/e42195/16bab0/cache":"/tmp/worker/e42195/16bab0/cache" -e GOPATH -e GOPROXY -e GOSUMDB -e GOFLAGS -e CGO_ENABLED -e GIT_CONFIG_KEY_0 -e GIT_CONFIG_VALUE_0 -e GIT_CONFIG_KEY_1 -e GIT_CONFIG_VALUE_1 -e GIT_CONFIG_KEY_2 -e GIT_CONFIG_VALUE_2 -e GIT_CONFIG_COUNT -e CONTAINERBASE_CACHE_DIR -w "/tmp/worker/e42195/16bab0/repos/github/bangumi/github-bot" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c "install-tool golang 1.21.1 && go get -d -t ./... && go install github.com/marwan-at-work/mod/cmd/mod@latest && mod upgrade --mod-name=github.com/google/go-github/v53 -t=55 && go mod tidy -compat=1.17 && go mod tidy -compat=1.17"
go: downloading github.com/samber/lo v1.38.1
go: downloading entgo.io/ent v0.12.3
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/go-resty/resty/v2 v2.7.0
go: downloading github.com/google/go-github/v53 v53.2.0
go: downloading github.com/jaevor/go-nanoid v1.3.0
go: downloading github.com/kataras/go-sessions/v3 v3.3.1
go: downloading github.com/labstack/echo/v4 v4.11.1
go: downloading github.com/lib/pq v1.10.9
go: downloading github.com/palantir/go-githubapp v0.19.0
go: downloading github.com/rs/zerolog v1.30.0
go: downloading github.com/trim21/errgo v0.0.2
go: downloading golang.org/x/oauth2 v0.11.0
go: downloading golang.org/x/exp v0.0.0-20230224173230-c95f2b4c22f2
go: downloading golang.org/x/net v0.14.0
go: downloading github.com/google/uuid v1.3.0
go: downloading github.com/valyala/fasthttp v1.44.0
go: downloading github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8
go: downloading github.com/google/go-querystring v1.1.0
go: downloading github.com/labstack/gommon v0.4.0
go: downloading golang.org/x/crypto v0.12.0
go: downloading github.com/golang-jwt/jwt v3.2.2+incompatible
go: downloading github.com/valyala/fasttemplate v1.2.2
go: downloading golang.org/x/time v0.3.0
go: downloading github.com/bradleyfalzon/ghinstallation/v2 v2.6.0
go: downloading github.com/google/go-github/v55 v55.0.0
go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
go: downloading github.com/hashicorp/golang-lru v0.6.0
go: downloading github.com/patrickmn/go-cache v2.1.0+incompatible
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475
go: downloading github.com/shurcooL/githubv4 v0.0.0-20230704064427-599ae7bbf278
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/valyala/bytebufferpool v1.0.0
go: downloading ariga.io/atlas v0.10.2-0.20230427182402-87a07dfb83bf
go: downloading github.com/andybalholm/brotli v1.0.5
go: downloading github.com/klauspost/compress v1.16.0
go: downloading github.com/mattn/go-isatty v0.0.19
go: downloading github.com/golang-jwt/jwt/v4 v4.5.0
go: downloading github.com/shurcooL/graphql v0.0.0-20220606043923-3cf50f8a0a29
go: downloading github.com/hashicorp/hcl/v2 v2.16.1
go: downloading github.com/zclconf/go-cty v1.13.0
go: downloading google.golang.org/appengine v1.6.7
go: downloading github.com/cloudflare/circl v1.3.3
go: downloading golang.org/x/sys v0.11.0
go: downloading golang.org/x/text v0.12.0
go: downloading github.com/go-openapi/inflect v0.19.0
go: downloading golang.org/x/mod v0.10.0
go: downloading github.com/golang/protobuf v1.5.3
go: downloading github.com/agext/levenshtein v1.2.3
go: downloading github.com/apparentlymart/go-textseg/v13 v13.0.0
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/google/go-cmp v0.5.9
go: downloading google.golang.org/protobuf v1.31.0
go: upgraded github.com/bradleyfalzon/ghinstallation/v2 v2.5.0 => v2.6.0
go: upgraded github.com/shurcooL/githubv4 v0.0.0-20230424031643-6cea62ecd5a9 => v0.0.0-20230704064427-599ae7bbf278
go: downloading github.com/marwan-at-work/mod v0.5.0
go: downloading github.com/urfave/cli/v2 v2.3.0
go: downloading github.com/PuerkitoBio/goquery v1.5.1
go: downloading github.com/google/go-github v17.0.0+incompatible
go: downloading golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4
go: downloading golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d
go: downloading golang.org/x/tools v0.1.12
go: downloading github.com/andybalholm/cascadia v1.1.0
go: downloading golang.org/x/net v0.0.0-20220722155237-a158d28d115b
go: downloading github.com/google/go-querystring v0.0.0-20170111101155-53e6ce116135
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d
go: downloading golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
go: downloading github.com/russross/blackfriday/v2 v2.0.1
go: downloading github.com/shurcooL/sanitized_anchor_name v1.0.0
could not get go.mod file: could not parse go.mod file: go.mod:5: unknown directive: toolchain

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.