starred/warmbly
1
0
Fork 0
mirror of https://github.com/warmbly/warmbly.git synced 2026-10-12 16:02:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #906 from warmbly/devin/1791565867-patched-go-network-security

Browse Source 
feat: patch Go and x net vulnerabilities blocking main security checks
This commit is contained in:
Matthew Meszaros
2026-10-09 17:27:21 +00:00
committed by GitHub
parent 1c325b7a87 76abcf1d30
commit a677983aa1
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go.mod
+3 -7
View File
@@ -2,12 +2,8 @@ module github.com/warmbly/warmbly
go 1.26.0
// Pinned so every build, local and CI, uses a toolchain carrying the
// standard-library security fixes. The net/http, crypto/tls, net/url,
// encoding/xml, encoding/asn1 and net advisories govulncheck reports against
// earlier toolchains are fixed in go1.26.6; the Docker builder images track the
// matching 1.26 line. Raise both together.
toolchain go1.26.8
// Keep the pinned toolchain and 1.26 builder images on patched security releases.
toolchain go1.26.9
require (
cloud.google.com/go/cloudtasks v1.13.7
@@ -57,7 +53,7 @@ require (
go.uber.org/zap v1.27.0
golang.org/x/crypto v0.57.0
golang.org/x/mod v0.41.0
golang.org/x/net v0.59.0
golang.org/x/net v0.60.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.23.0
golang.org/x/term v0.46.0
go.sum
+2
View File
@@ -1078,6 +1078,8 @@ golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
golang.org/x/net v0.16.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=