8000 Update starship to 1.27.0 by gominimal-pkgmgr-mgr[bot] · Pull Request #927 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

Update starship to 1.27.0 - #927

Merged
bryan-minimal merged 1 commit into
mainfrom
update-starship-1.27.0
Oct 18, 2026
Merged

bryan-minimal merged 1 commit into
mainfrom
update-starship-1.27.0

Conversation

@gominimal-pkgmgr-mgr
Copy link
Copy Markdown
Contributor

Update starship 1.26.0 → 1.27.0

Source: github:starship/starship
Release: https://github.com/starship/starship/releases/tag/v1.27.0
Changelog: starship/starship@v1.26.0...v1.27.0
Released: 1 days ago (2026-10-17)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 1.27.0 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 2 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (2)

This update clears 2 vulnerabilities affecting 1.26.0:

CVE / GHSA Severity Fixed in
GHSA-679r-jwc5-r5m3 MEDIUM via range: >= 1.1.0, <= 1.26.0; >= 1.1.0, <= 1.26.0
GHSA-x486-6jjc-phfp MEDIUM via range: <= 1.26.0; <= 1.26.0
Advisory summaries
  • GHSA-679r-jwc5-r5m3 — exec_git passes --git-dir, which skips git's repository ownership check (Published 2026-10-17)
  • GHSA-x486-6jjc-phfp — Versioned metadata symlink can cause unbounded memory consumption during prompt rendering (Published 2026-10-17)

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ starship 1.26.0 1.27.0
~ starship-upstream 1.26.0 1.27.0

Changes

Old New
Version 1.26.0 1.27.0
SHA256 8c95e8a6c596b29a... f1887ffa88a7ba43...
Size 11.0 MB
Source https://github.com/starship/starship/archive/refs/tags/v1.26.0.tar.gz https://github.com/starship/starship/archive/refs/tags/v1.27.0.tar.gz
  • License: ISC (source: GitHub + tarball)

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 18, 2026 18:46
@coderabbitai
coderabbitai Bot commented Oct 18, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d8f99db9-1fc3-4bf5-82e4-22f9831c75be

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal bryan-minimal left a comment
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Version bump, all checks pass.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 18, 2026
Merged via the queue into main with commit e151ec2 Oct 18, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-starship-1.27.0 branch October 18, 2026 22:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0