fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.19.0

[self-hosted-renovatebot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/bradleyfalzon/ghinstallation/v2	v2.13.0 → v2.19.0

---

Release Notes

bradleyfalzon/ghinstallation (github.com/bradleyfalzon/ghinstallation/v2)

v2.19.0

Compare Source

What's Changed

• Update go-github to v85 by @​asvoboda in #​188
• Update go-github to v88 by @​asvoboda in #​192
• Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​190

Full Changelog: bradleyfalzon/ghinstallation@v2.18.0...v2.19.0

v2.18.0

Compare Source

What's Changed

• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​165
• bump github.com/google/go-github to v83 and ci updates by @​cpanato in #​184
• Update google/go-github to v84 by @​asvoboda in #​185
• Bump actions/checkout from 5.0.0 to 6.0.2 by @​dependabot[bot] in #​180
• Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by @​dependabot[bot] in #​176

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

v2.17.0

Compare Source

What's Changed

• Update README: improve formatting, replace GoDoc with GoReference by @​alexandear in #​161
• Update go-github to v73 by @​asvoboda in #​162
• update golangci-lint to v2.2.x by @​cpanato in #​163
• Update google/go-github to v75 by @​asvoboda in #​167

New Contributors

• @​alexandear made their first contribution in #​161

Full Changelog: bradleyfalzon/ghinstallation@v2.16.0...v2.17.0

v2.16.0

Compare Source

What's Changed

• Update to go-github v72 by @​asvoboda in #​158
• Bump actions/setup-go from 5.4.0 to 5.5.0 in the actions group by @​dependabot in #​157
• Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @​dependabot in #​156

Full Changelog: bradleyfalzon/ghinstallation@v2.15.0...v2.16.0

v2.15.0

Compare Source

What's Changed

• bump go-github to v69.2.0 by @​cpanato in #​147
• Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in #​148
• Bump actions/setup-go from 5.3.0 to 5.4.0 in the actions group by @​dependabot in #​151
• Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 by @​dependabot in #​152
• Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @​dependabot in #​149
• update go-github to v71 by @​cpanato in #​154
• upgrade golangci-lint to v2 and use best practices for the workflows by @​cpanato in #​155

Full Changelog: bradleyfalzon/ghinstallation@v2.14.0...v2.15.0

v2.14.0

Compare Source

What's Changed

• feat: add golangci-lint setup and fix lint issues by @​chenrui333 in #​139
• chore: add go1.24-rc1 for matrix check by @​chenrui333 in #​138
• Bump the actions group across 1 directory with 2 updates by @​dependabot in #​145
• Update go to use 1.24.x and golangci-lint by @​cpanato in #​146
• Upgrade github.com/google/go-github from v68 to v69 by @​andygrunwald in #​142

Full Changelog: bradleyfalzon/ghinstallation@v2.13.0...v2.14.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[self-hosted-renovatebot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.24.0
github.com/golang-jwt/jwt/v4	v4.5.1 -> v4.5.2

[self-hosted-renovatebot]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.25.0
github.com/golang-jwt/jwt/v4	v4.5.1 -> v4.5.2
github.com/google/go-querystring	v1.1.0 -> v1.2.0

[cursor]

PR Summary

Medium Risk
Touches GitHub App installation auth (ghinstallation/JWT) and a large go-github major jump indirectly, though app code is unchanged—regression risk is mainly in PEM/token HTTP transport behavior.

Overview
Renovate bumps github.com/bradleyfalzon/ghinstallation/v2 from v2.13.0 to v2.19.0, with matching go.sum updates. The module’s Go version moves from 1.23 (with a go1.24.6 toolchain pin) to 1.25.0 and drops the explicit toolchain line.

Transitive deps pulled in with ghinstallation also change: github.com/golang-jwt/jwt/v4 4.5.1 → 4.5.2, github.com/google/go-github v68 → v88, github.com/google/go-querystring 1.1.0 → 1.2.0, and github.com/google/go-cmp 0.6.0 → 0.7.0 (test). There are no application .go changes—only lockfiles.

^{Reviewed by Cursor Bugbot for commit 170c19d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[gitops-autobot-reviewer-cresta]

Codeowner Check

Status: ⌛ No reviewer with approval

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 8574b50a-3cc2-4c25-a290-1f15f62aa02f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/githubproxy.fjygbaifeng.eu.org-bradleyfalzon-ghinstallation-v2-2.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Go version mismatches CI pin
  • Updated the GitHub Actions workflow go-version pin from 1.24.x to 1.25.x so CI matches the go.mod 1.25.0 requirement.

Or push these changes by commenting:

@cursor push 514fed72d7

Preview (514fed72d7)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,7 +18,7 @@
       - name: Install Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.24.x
+          go-version: 1.25.x
       - name: Check out code
         uses: actions/checkout@v4
       - name: golangci-lint

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 170c19d. Configure here.}

[cursor]

Go version mismatches CI pin

Medium Severity

Updating ghinstallation to v2.19.0 raised the module go directive to 1.25.0, but CI still installs 1.24.x. Builds can fail when GOTOOLCHAIN=local, or silently run a different toolchain than the workflow intends when auto-download is enabled.

 

^{Reviewed by Cursor Bugbot for commit 170c19d. Configure here.}