Tuesday, November 03, 2026

Re: [maintainer update] security/gosec 2.30.0

On 2026/11/03 14:41, Laurent Cheylus wrote: > Hi Daniel, > > ----- Mail original ----- > > On Tue, 27 Oct 2026 12:31:08 +0100 (CET), Laurent Cheylus > > <foxy@free.fr> wrote: > > > > > Hi ports@ > > > > > > update for security/gosec to the latest version 2.30.0 > > > > > > Changelog: > > > - https://github.com/securego/gosec/releases/tag/v2.28.0 > > > - https://github.com/securego/gosec/releases/tag/v2.29.0 > > > - https://github.com/securego/gosec/releases/tag/v2.30.0 > > > > > > Build and tests OK on current/amd64 with Go version 1.27.3 > > > > > > Tests welcome and please commit if OK. > > > > doesn't seem to build here: > > github.com/securego/gosec/v2/cmd/gosecutil > > github.com/mozilla/tls-observatory/constants > > golang.org/x/text/internal/tag > > golang.org/x/text/internal/language > > golang.org/x/text/internal/language/compact > > golang.org/x/text/language > > golang.org/x/text/internal > > golang.org/x/text/cases > > github.com/securego/gosec/v2/cmd/tlsconfig > > *** Error 1 in . (/usr/ports/lang/go/go.port.mk:182 'do-build') look higher up for the actual error, go usually keeps on building for quite a long time afterwards. > > *** Error 2 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3090 > > '/usr/ports/pobj/gosec-2.30.0/build-amd64/.build_done': @cd /usr/ports/secur...) > > *** Error 2 in /usr/ports/security/gosec (/usr/ports/infrastructure/mk/bsd.port.mk:2729 'fake': @lock=gosec-2.30.0; export _LOCKS_HELD=" go...) > > No issue to build security/gosec verson 2.30.0 with my patch on current/amd64 with Go version 1.27.3 > > $ uname -a > OpenBSD openbsd-dev.home.lan 8.0 GENERIC.MP#124 amd64 > $ go version > go version go1.27.3 openbsd/amd64 > > $ make clean=all && make distclean > $ make build > (...) > github.com/securego/gosec/v2/cmd/tlsconfig > github.com/securego/gosec/v2/autofix > github.com/securego/gosec/v2/cmd/gosec > $ make fake > ===> Faking installation for gosec-2.30.0 > /usr/obj/ports/gosec-2.30.0/bin/install -d -m 755 /usr/obj/ports/gosec-2.30.0/fake-amd64/usr/local/bin && /usr/obj/ports/gosec-2.30.0/bin/install -c -m 755 /usr/obj/ports/gosec-2.30.0/go/bin/* /usr/obj/ports/gosec-2.30.0/fake-amd64/usr/local/bin; > > $ /usr/obj/ports/gosec-2.30.0/fake-amd64/usr/local/bin/gosec -version > Version: 2.30.0 > Git tag: > Build date: > > Laurent > btw gzipped patches are a bit of a pain to apply, that isn't big enough to be worth it.

No comments:

Post a Comment