[dependabot]

Bumps github.com/git-pkgs/forge from 0.10.1 to 0.11.0.

Release notes

Sourced from github.com/git-pkgs/forge's releases.

v0.11.0

Changelog

• f17a23407d238f2f479e1fe66a1dc915220c0fd4 Accept Gitea GET webhook deliveries and parse GitLab webhooks under TinyGo
• 4aac417420eefc638600846df0a9283571a8afe9 Add --tag to release upload for parity with release create (#172)
• 3ccdc858ecdce68d07750bd22fd60015a0dcdd20 Add GetAuthenticatedUser to the Forge interface
• 1fb1dcd8a110e492a8b849c32b52ef989008d092 Add a funding subpackage that reads FUNDING.yml
• 42569fa89cc2473c7bf09cda3362555b50e241d6 Add forge pr checks command
• f4825313924739da7af213aa71f6da18b5cb74be Add repository and thread subscription management to NotificationService
• 7b3b374d38b83c5e20357236d1180ce0fa912969 Add subject number and repository URL to notifications
• 96a6824016e9e2733451144105485a38dc69069f Add webhook event parsing for GitHub, GitLab and Gitea/Forgejo
• 5069fafb05d86c4613fd4b8b03980ed545a69c2f Add webhook service for creating, listing and deleting repository webhooks
• 6c90249fb18226e62305bae597fcff11b3b6880c Allow targeting draft releases by release ID on GitHub (#190)
• f34fde160a7c53b15963a87b3bdb1c018b044f64 Apply --head filter client-side for Gitea/Forgejo pr list (#181)
• 204deb4e4c904063022386a68cff827cbfe3fdd6 Bump actions/setup-node from 7.0.0 to 7.1.0 (#173)
• e009779e3fa6d83e905f90ee6d877beb1f0a96f7 Bump github.com/git-pkgs/purl from 0.1.20 to 0.1.21 (#171)
• 3767c23acbd96a558a4cedac4860ffcbe80d696c Bump github.com/git-pkgs/purl from 0.1.21 to 0.1.23 (#194)
• 3a220af540fdbc8a0c1a6a5dfdd1b81179457c28 Bump github.com/git-pkgs/purl from 0.1.23 to 0.1.24
• 1e22764f2390ad2aad1e0b942319120d6a220830 Bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6
• e944051ea6e7ef3dc25c1a69de054a75969732b4 Bump golang.org/x/crypto from 0.57.0 to 0.58.0
• 1ae6372a3c1df224c41f92428f80a33870a8d0e7 Bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0
• 19e8c8b6d50508f4520f02d0b4139a5997d35e4d Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1
• a1548c49e5a3948b54f6d6e42c1bf426e8d19896 Bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 (#193)
• 773ce645cb6d16e19776484236ed833a24acfb8f Clarify that FORGE_HOST doesn't override the current repo's remote
• b014e4e6a58605db2e2fbaf68f6739139748bb97 Export the string-or-list type as StringList
• 3bb1c237c086703748d75c064f95c375d65663b3 Honor --host when resolving the repo from the git remote
• 0df138626f7386bd292fc1cb9c74875498597b44 Merge remote-tracking branch 'upstream/main' into add-webhook-service
• a6c59da008948a0741526f73113107b00aa9a014 Only set GitLab RepoURL for todos that belong to a project
• 25c7d73ed3f7a393106b9174c7d3981988edbac7 Parse FUNDING.yml with go.yaml.in/yaml/v3
• cc01a91da3ead713ba0a3f0115510671b1a78a63 Reject malformed webhook IDs and translate Gitea webhook event names
• caaf19799ef3552b7248ae1409fea7114670cc3f Reject status and workflow events on Gitea/Forgejo webhooks
• 72228bd27907701e2835554a3540f2a1ec84a3d7 Remove golangci-lint tool dependency (#170)
• 70caf18ac5059dbb877d26f2b191d24d4805723a Report HTTP status in Gitea/Forgejo API errors (#167)
• e8938044af484fa1a6a1635b5fa334ad3a351a89 Show empty check run and CI run sections in pr checks
• c4a76f1d828893640988a5b855eb79fbdc78d2e9 Treat default ports as equal when matching browser URL hosts
• f6f98ff318ff3971ef7fa31acf31154403872b4d Validate forge URLs before opening a browser
• 9e49089d3ac3c756f60056220df00ee201ffbbbb Wrap Gitea authenticated user errors and make Gerrit convertAccount a function
• 803fd523e6de75058d475d41dc9ff4989b77fbde fix(github): pass non-nil upload options when uploading release assets (#180)
• 824b6196ca9aea60f01a0349f2fed5103b952003 fix(pr checks): fetch check runs, nonzero exit codes, plain conclusions
• 5a8ca8b043299e0389e6e086288cc4300d161834 fix(pr checks): keep newest status per context, exit 8 for pending

Commits

• 83245cc Merge pull request #202 from git-pkgs/dependabot/go_modules/github.com/git-pk...
• e8c9c8c Merge pull request #201 from git-pkgs/dependabot/go_modules/go.yaml.in/yaml/v...
• 3a220af Bump github.com/git-pkgs/purl from 0.1.23 to 0.1.24
• 1e22764 Bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6
• 3547bd6 Merge pull request #196 from git-pkgs/fix/browser-url-validation
• c4a76f1 Treat default ports as equal when matching browser URL hosts
• 6915df0 Merge pull request #198 from abhinavgautam01/subscription-management
• f482531 Add repository and thread subscription management to NotificationService
• 646864b Merge pull request #195 from paoValle/feat/funding-discovery
• 14ab907 Merge pull request #197 from abhinavgautam01/authenticated-user
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated an internal dependency to a newer version.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The required github.com/git-pkgs/forge version in go.mod changes from v0.10.1 to v0.11.0.

Changes: Forge dependency update

Layer / File(s)	Summary
Update forge version go.mod	The required github.com/git-pkgs/forge version changes from v0.10.1 to v0.11.0.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: andrew

Merge Risk: Minimal · up to 4f9ff

This updates the forge dependency to v0.11.0. The only code that uses the library is remote URL parsing, which is reported to be unchanged. No merge-blocking risk was identified, and normal CI should confirm the build and tests.

Architecture risk: Low · up to 4f9ff

The change affects 1 system.

Changed systems: go.mod

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — go.mod (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in go.mod: The required github.com/git-pkgs/forge version changes from v0.10.1 to v0.11.0.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title states the main change: the dependency github.com/git-pkgs/forge is bumped from 0.10.1 to 0.11.0. The raw summary confirms that go.mod is the only non-excluded file changed, with one line up…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title states the main change: the dependency github.com/git-pkgs/forge is bumped from 0.10.1 to 0.11.0. The raw summary confirms that go.mod is the only non-excluded file changed, with one line updated. The title is specific and matches the changeset.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Some tools did not complete. Review the errors below.

OSV Scanner (2.7.0)

go.mod

OSV Scanner exited with code 127 without a usable report

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 23ab4df0-5d75-4f93-9fdc-152f9335a44a

Commits

Reviewing files that changed from the base of the PR and between 4ce3b27 and 4f9ff7d.

Files ignored due to path filters: 1

• go.sum is excluded by !**/*.sum

Files selected for processing: 1

• go.mod

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.