dependency

Aug 30, 2026

Changes in this version

+ type OutdatedItem struct

+ Current string

+ Ecosystem string

+ Latest string

+ Magnitude string

+ Name string

+ func OutdatedAtOrAbove(deps []supplychain.Dependency, at string) []OutdatedItem

type SkipCategory

+ const SkipCorruptPin

Aug 4, 2026

Changes in this version

type UpdateResult

+ ReconcileErrors []reconcile.ConfigError

Jul 11, 2026

Changes in this version

+ func ApplyIgnores(deps []supplychain.Dependency, ignores []VulnIgnore, now time.Time) []supplychain.Dependency

+ func RemediationSummaryMarkdown(evals []RemediationEvaluation) string

type AppliedUpdate

+ Remediation string

+ type CandidateSet struct

+ Category SkipCategory

+ Dep supplychain.Dependency

+ Eligible bool

+ Reason string

+ ResolvedTarget string

+ Target string

+ func Construct(dep supplychain.Dependency, cfg UpdateConfig, ecosystemFilter map[string]bool, ...) CandidateSet

+ func (cs CandidateSet) Admits(v string) (bool, PolicyLayer, string)

+ type CargoChurn struct

+ Intended int

+ Mutated int

+ type PolicyLayer string

+ const PolicyCeiling

+ const PolicyCooldown

+ const PolicyNativeConstraint

+ const PolicyNone

+ const PolicyPinned

+ const PolicyPrerelease

+ type RemediationEvaluation struct

+ BlockedBy PolicyLayer

+ Detail string

+ FixedIn string

+ Package string

+ Severity string

+ State RemediationState

+ Version string

+ VulnID string

+ func EvaluateRemediation(deps []supplychain.Dependency, cfg UpdateConfig, result *UpdateResult) []RemediationEvaluation

+ func Residuals(evals []RemediationEvaluation, failOn string) []RemediationEvaluation

+ func (e RemediationEvaluation) Explain() string

+ type RemediationState string

+ const StateBlockedByCooldown

+ const StateBlockedByPolicy

+ const StateNoFix

+ const StateReachableUnapplied

+ const StateRemediated

+ type ResidualVuln struct

+ Dep string

+ Severity string

+ Version string

+ VulnID string

+ func ResidualVulnerabilities(deps []supplychain.Dependency, result *UpdateResult, failOn string) []ResidualVuln

+ type SkipCategory string

+ const SkipCeilingExceeded

+ const SkipConflict

+ const SkipDockerConstraint

+ const SkipEcosystemFiltered

+ const SkipFileUntracked

+ const SkipIndirect

+ const SkipMajorHeld

+ const SkipNoChange

+ const SkipNoFixedVersion

+ const SkipNoGoSource

+ const SkipNone

+ const SkipNotAutoUpdatable

+ const SkipOther

+ const SkipReplaceDirective

+ const SkipSecurityOnly

+ const SkipSourceMismatch

+ const SkipSourceUnresolvable

+ const SkipUnresolved

+ const SkipUpToDate

type SkippedDep

+ Category SkipCategory

type UpdateConfig

+ Ignore []VulnIgnore

+ MaxUpdate string

+ type VulnIgnore struct

+ ID string

+ Reason string

+ Until string

Jun 4, 2026

Changes in this version

type UpdateConfig

+ Writer io.Writer

Mar 16, 2026

Changes in this version

+ func NormalizeSkipReason(reason string) string

+ type EnrichmentDetail struct

+ Advisories int

+ Ecosystem string

+ Name string

+ Version string

Mar 13, 2026

Changes in this version

+ func EnrichDependencies(deps []freshness.Dependency, advisories []security.Advisory) int

+ func FetchAdvisories(ctx context.Context, fc forge.Forge, ref, rootDir string) ([]security.Advisory, error)

+ func GenerateArtifacts(ctx context.Context, repoRoot, outputDir string, result *UpdateResult, ...) ([]string, error)

+ func LoadAdvisories(rootDir string) ([]security.Advisory, error)

+ func Verify(ctx context.Context, moduleDirs []string, repoRoot string, ...) (string, error)

+ type AppliedUpdate struct

+ CVEsFixed []string

+ Dep freshness.Dependency

+ NewVer string

+ OldVer string

+ UpdateType string

+ type SkippedDep struct

+ Dep freshness.Dependency

+ Reason string

+ func FilterUpdateCandidates(deps []freshness.Dependency, cfg UpdateConfig, trackedFiles map[string]bool) (candidates []freshness.Dependency, skipped []SkippedDep)

+ type ToolchainDependency struct

+ BuilderImage string

+ Dockerfile string

+ Ecosystem string

+ ModuleDir string

+ Name string

+ Version string

+ type UpdateConfig struct

+ Bundle bool

+ DryRun bool

+ Ecosystems []string

+ OutputDir string

+ Policy string

+ RootDir string

+ Verify bool

+ Vulncheck bool

+ type UpdateResult struct

+ Applied []AppliedUpdate

+ ArtifactErr error

+ Artifacts []string

+ FilesChanged []string

+ Skipped []SkippedDep

+ Toolchains []ToolchainDependency

+ TouchedModuleDirs []string

+ Verified bool

+ VerifyErr error

+ VerifyLog string

+ func Update(ctx context.Context, cfg UpdateConfig, deps []freshness.Dependency) (*UpdateResult, error)