Skip to content

Update module github.com/urfave/cli/v3 to v3.9.0

456b204
Select commit
Loading
Failed to load commit list.
Open

Update module github.com/urfave/cli/v3 to v3.9.0 #68

Update module github.com/urfave/cli/v3 to v3.9.0
456b204
Select commit
Loading
Failed to load commit list.
fossabot / fossabot: Dependency Review failed May 12, 2026 in 1h 3m 15s

Review Recommended

I recommend reviewing this upgrade before merging because a CI failure in GitHub Actions directly related to the upgrade is blocking the PR. The go.sum file is out of sync: it still contains stale checksum entries for the previous version (lines 7–8 of go.sum) alongside the correct entries for the new version, causing go mod tidy to exit with code 1. The fix is straightforward — running go mod tidy locally and committing the updated go.sum — but must be completed before merge. A secondary SonarQube CI failure exists due to a conflicting Automatic Analysis configuration, but this is unrelated to the dependency upgrade. The application's core CLI usage in cmd/syspkg/main.go uses only standard urfave/cli/v3 APIs (cli.Command, cli.BoolFlag, cmd.Bool(), cmd.Args().Slice(), app.Run()) and is not affected by any breaking API changes. A typosquat package (github.com/utfave/cli, note the transposed 'r' and 't') exists in the wild and should be treated as a reminder to double-check import paths, but the codebase correctly imports github.com/urfave/cli/v3 throughout.