chore(deps): bump gonum.org/v1/gonum from 0.16.0 to 0.17.0 #7252

	name: Semgrep Security Scan

	on:
	pull_request:
	branches: [ main ]
	merge_group: # run if triggered as part of a merge queue
	push:
	branches: [ main ]
	schedule:
	- cron: '0 1 * * *'

	jobs:
	semgrep:
	name: Scan
	runs-on: ubuntu-latest
	permissions:
	contents: read
	checks: write

	container:
	image: semgrep/semgrep@sha256:1844697a3d8b80166e2eaadb93f189a9372e6c8dc025cb14d9400f06e7475261 #v1.116.0

	# Skip any PR created by dependabot to avoid permission issues:
	if: (github.actor != 'dependabot[bot]')

	steps:
	# Fetch project source with GitHub Actions Checkout.
	- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6.0.1
	# Run the "semgrep ci" command on the command line of the docker image.
	- run: semgrep ci
	env:
	# Add the rules that Semgrep uses by setting the SEMGREP_RULES environment variable - more at semgrep.dev/explore.
	SEMGREP_RULES: p/default p/golang p/github-actions p/docker

Provide feedback