Skip to content

chore(deps): bump the go-security group across 3 directories with 2 updates #63

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the go-security group across 3 directories with 2 updates #63

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 20, 2025 •
edited
Loading

Bumps the go-security group with 2 updates in the /server directory: golang.org/x/crypto and github.com/go-viper/mapstructure/v2.
Bumps the go-security group with 1 update in the /coraza-spoa directory: golang.org/x/crypto.
Bumps the go-security group with 1 update in the /pkg directory: golang.org/x/crypto.

Updates golang.org/x/crypto from 0.38.0 to 0.45.0

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

Updates github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0

Release notes

Sourced from github.com/go-viper/mapstructure/v2's releases.

v2.4.0

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.3.0...v2.4.0

v2.3.0

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.2.1...v2.3.0

Commits

Updates golang.org/x/crypto from 0.38.0 to 0.45.0

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.38.0 to 0.45.0

Commits
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • 2df4153 acme/autocert: let automatic renewal work with short lifetime certs
  • bcf6a84 acme: pass context to request
  • b4f2b62 ssh: fix error message on unsupported cipher
  • 79ec3a5 ssh: allow to bind to a hostname in remote forwarding
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump the go-security group across 3 directories with 2 u…
417b3e7 
…pdates

Bumps the go-security group with 2 updates in the /server directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure).
Bumps the go-security group with 1 update in the /coraza-spoa directory: [golang.org/x/crypto](https://github.com/golang/crypto).
Bumps the go-security group with 1 update in the /pkg directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.38.0 to 0.45.0
- [Commits](golang/crypto@v0.38.0...v0.45.0)

Updates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](go-viper/mapstructure@v2.2.1...v2.4.0)

Updates `golang.org/x/crypto` from 0.38.0 to 0.45.0
- [Commits](golang/crypto@v0.38.0...v0.45.0)

Updates `golang.org/x/crypto` from 0.38.0 to 0.45.0
- [Commits](golang/crypto@v0.38.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
  dependency-group: go-security
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.4.0
  dependency-type: indirect
  dependency-group: go-security
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go-security
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
  dependency-group: go-security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 20, 2025

Labels

The following labels could not be found: backend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 20, 2025
@github-actions
Copy link

github-actions bot commented Nov 20, 2025

🎨 Frontend Code Quality Check Unknown ⚠️

PR #63 frontend code check completed.

中文报告

ℹ️ 状态: 检查状态异常，请检查工作流配置。

English Report

ℹ️ Status: Check status is abnormal, please check workflow configuration.

🔗 View Details: Click here to see the full check results

@github-actions
Copy link

github-actions bot commented Nov 20, 2025

⚡ Go Code Quality Check Failed ❌

PR #63 Go code quality check completed.

中文报告

⚠️ 需要关注: 发现需要修复的重要问题，请查看详细日志。

点击下方链接查看详细检查结果。

English Report

⚠️ Attention Required: Important issues found that need to be fixed. Please check the detailed logs.

Click the link below to view detailed check results.

🔗 View Details: Click here to see the full check results

@github-actions
Copy link

github-actions bot commented Nov 20, 2025

🚀 Docker Quick Build Success ✅

PR #63 AMD64 platform verification completed (optimized for faster verification)

中文报告

🎉 结果: Docker 构建验证通过！镜像构建成功。

🏗️ 构建详情:

  • ✅ 验证平台: linux/amd64
  • ✅ 构建状态: 成功
  • ✅ 缓存优化: GitHub Actions 缓存已启用
  • ✅ 提交: 417b3e724fcb4fd364aadb60cf79043ca630eb3a
  • ✅ 构建时间: 2025/11/20 10:09:43

💡 优化说明: PR 阶段仅构建 AMD64 以提高速度，完整的多平台构建将在合并后进行。

English Report

🎉 Result: Docker build verification passed! Image build successful.

🏗️ Build Details:

  • ✅ Verification Platform: linux/amd64
  • ✅ Build Status: Success
  • ✅ Cache Optimization: GitHub Actions cache enabled
  • ✅ Commit: 417b3e724fcb4fd364aadb60cf79043ca630eb3a
  • ✅ Build Time: 2025/11/20 10:09:43

💡 Optimization Note: PR stage only builds AMD64 to improve speed, complete multi-platform build will be performed after merge.

🔗 查看详细信息 / View Details: 点击查看完整构建结果 / Click here to see full build results

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code size/M

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant