mirror of
https://github.com/1Panel-dev/1Panel.git
synced 2026-10-09 08:00:27 +00:00
ssongliu
d26bc9a3a4
Update pending Go and frontend dependencies, including gRPC, OpenTelemetry and SVGO security fixes. Raise the minimum Go version to 1.26.6 and update x/image and x/mod to patched versions. Use moby/go-archive directly for image build contexts so its vulnerable v0.1.0 replacement can be removed and v0.3.0 used. Regenerate Go module checksums with go mod tidy and refresh the npm lockfile. Validation: Linux amd64 builds, existing Go tests and go mod verify pass for core and agent; frontend production build passes; npm audit reports zero vulnerabilities. Frontend type-check reports the same nine errors with the original and updated lockfiles. Go scanning still flags two advisories in the legacy Docker SDK, which has no patched release on its current module path. A separate SDK migration and host Docker daemon updates remain necessary.
141 lines
5.9 KiB
AMPL
141 lines
5.9 KiB
AMPL
module github.com/1Panel-dev/1Panel/core
|
|
|
|
go 1.26.6
|
|
|
|
require (
|
|
github.com/beevik/etree v1.7.0
|
|
github.com/coreos/go-oidc/v3 v3.20.0
|
|
github.com/creack/pty v1.1.24
|
|
github.com/crewjam/saml v0.5.1
|
|
github.com/fsnotify/fsnotify v1.10.1
|
|
github.com/gin-contrib/gzip v1.2.6
|
|
github.com/gin-gonic/gin v1.12.0
|
|
github.com/glebarez/sqlite v1.11.0
|
|
github.com/go-gormigrate/gormigrate/v2 v2.1.6
|
|
github.com/go-jose/go-jose/v4 v4.1.4
|
|
github.com/go-ldap/ldap/v3 v3.4.14
|
|
github.com/go-playground/validator/v10 v10.30.3
|
|
github.com/go-resty/resty/v2 v2.17.2
|
|
github.com/go-webauthn/webauthn v0.17.4
|
|
github.com/google/pprof v0.0.0-20250820193118-f64d9cf942d6
|
|
github.com/google/uuid v1.6.0
|
|
github.com/gorilla/websocket v1.5.3
|
|
github.com/jinzhu/copier v0.4.0
|
|
github.com/johnfercher/maroto/v2 v2.4.1
|
|
github.com/mattermost/xml-roundtrip-validator v0.1.0
|
|
github.com/nicksnyder/go-i18n/v2 v2.6.1
|
|
github.com/oschwald/maxminddb-golang v1.13.1
|
|
github.com/patrickmn/go-cache v2.1.0+incompatible
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/pkg/sftp v1.13.11
|
|
github.com/robfig/cron/v3 v3.0.1
|
|
github.com/russellhaering/goxmldsig v1.6.1
|
|
github.com/shirou/gopsutil/v4 v4.26.7
|
|
github.com/sirupsen/logrus v1.10.2
|
|
github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e
|
|
github.com/soheilhy/cmux v0.1.5
|
|
github.com/spf13/cobra v1.10.2
|
|
github.com/spf13/viper v1.21.0
|
|
github.com/swaggo/files/v2 v2.0.2
|
|
github.com/swaggo/swag v1.16.6
|
|
github.com/xlzd/gotp v0.1.0
|
|
golang.org/x/crypto v0.56.0
|
|
golang.org/x/image v0.45.0
|
|
golang.org/x/net v0.58.0
|
|
golang.org/x/oauth2 v0.36.0
|
|
golang.org/x/sys v0.47.0
|
|
golang.org/x/term v0.45.0
|
|
golang.org/x/text v0.41.0
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
gorm.io/gorm v1.31.2
|
|
)
|
|
|
|
require (
|
|
github.com/Azure/go-ntlmssp v0.1.1 // indirect
|
|
github.com/KyleBanks/depth v1.2.1 // indirect
|
|
github.com/boombuler/barcode v1.1.0 // indirect
|
|
github.com/bytedance/gopkg v0.1.4 // indirect
|
|
github.com/bytedance/sonic v1.15.0 // indirect
|
|
github.com/bytedance/sonic/loader v0.5.1 // indirect
|
|
github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
|
|
github.com/cloudwego/base64x v0.1.6 // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/ebitengine/purego v0.10.2 // indirect
|
|
github.com/f-amaral/go-async v0.3.0 // indirect
|
|
github.com/fxamacker/cbor/v2 v2.9.2 // indirect
|
|
github.com/gabriel-vasile/mimetype v1.4.13 // indirect
|
|
github.com/gin-contrib/sse v1.1.1 // indirect
|
|
github.com/glebarez/go-sqlite v1.22.0 // indirect
|
|
github.com/go-asn1-ber/asn1-ber v1.5.8 // indirect
|
|
github.com/go-ole/go-ole v1.2.6 // indirect
|
|
github.com/go-openapi/jsonpointer v0.23.0 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.5 // indirect
|
|
github.com/go-openapi/spec v0.22.4 // indirect
|
|
github.com/go-openapi/swag/conv v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonname v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/loading v0.26.0 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
|
|
github.com/go-playground/locales v0.14.1 // indirect
|
|
github.com/go-playground/universal-translator v0.18.1 // indirect
|
|
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
|
|
github.com/go-webauthn/x v0.2.6 // indirect
|
|
github.com/goccy/go-json v0.10.6 // indirect
|
|
github.com/goccy/go-yaml v1.19.2 // indirect
|
|
github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
|
|
github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
|
|
github.com/google/go-tpm v0.9.8 // indirect
|
|
github.com/hhrutter/lzw v1.0.0 // indirect
|
|
github.com/hhrutter/pkcs7 v0.2.0 // indirect
|
|
github.com/hhrutter/tiff v1.0.2 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jinzhu/inflection v1.0.0 // indirect
|
|
github.com/jinzhu/now v1.1.5 // indirect
|
|
github.com/johnfercher/go-tree v1.1.0 // indirect
|
|
github.com/jonboulle/clockwork v0.5.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.3.0 // indirect
|
|
github.com/kr/fs v0.1.0 // indirect
|
|
github.com/leodido/go-urn v1.4.0 // indirect
|
|
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
|
|
github.com/mattn/go-isatty v0.0.21 // indirect
|
|
github.com/mattn/go-runewidth v0.0.21 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
|
github.com/ncruces/go-strftime v1.0.0 // indirect
|
|
github.com/pdfcpu/pdfcpu v0.11.1 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.3.0 // indirect
|
|
github.com/philhofer/fwd v1.2.0 // indirect
|
|
github.com/phpdave11/gofpdf v1.4.3 // indirect
|
|
github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
|
|
github.com/quic-go/qpack v0.6.0 // indirect
|
|
github.com/quic-go/quic-go v0.59.1 // indirect
|
|
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
|
|
github.com/sagikazarmark/locafero v0.12.0 // indirect
|
|
github.com/spf13/afero v1.15.0 // indirect
|
|
github.com/spf13/cast v1.10.0 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/subosito/gotenv v1.6.0 // indirect
|
|
github.com/tinylib/msgp v1.6.4 // indirect
|
|
github.com/tklauser/go-sysconf v0.3.16 // indirect
|
|
github.com/tklauser/numcpus v0.11.0 // indirect
|
|
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
|
|
github.com/ugorji/go/codec v1.3.1 // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
github.com/yusufpapurcu/wmi v1.2.4 // indirect
|
|
go.mongodb.org/mongo-driver/v2 v2.5.1 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.5 // indirect
|
|
golang.org/x/arch v0.26.0 // indirect
|
|
golang.org/x/mod v0.40.0 // indirect
|
|
golang.org/x/sync v0.22.0 // indirect
|
|
golang.org/x/tools v0.49.0 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
modernc.org/libc v1.72.0 // indirect
|
|
modernc.org/mathutil v1.7.1 // indirect
|
|
modernc.org/memory v1.11.0 // indirect
|
|
modernc.org/sqlite v1.48.2 // indirect
|
|
)
|