argoyle
20e8dbdbb8
default-request-adder / test (push) Successful in 29s
default-request-adder / vulnerabilities (push) Successful in 31s
Unbound Release / Check Preconditions (push) Successful in 1s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 9s
Unbound Release / Create Release (push) Successful in 11s
Release / release (push) Successful in 26s
default-request-adder / build (push) Successful in 19m41s
Bumps `golang.org/x/net` from v0.57.0 to v0.61.0 to fix five HTTP/2 vulnerabilities that govulncheck reports as reachable through client-go: - GO-2026-6603: HTTP/2 server memory exhaustion due to Trailer headers - GO-2026-6610: HTTP/2 transport accepts malformed framing-related headers - GO-2026-6611: Excessive CPU consumption from repeated initial window changes - GO-2026-6612: Double flow control refund on HTTP/2 server streams - GO-2026-6617: HTTP/2 server crash due to HPACK encoder race `go get` also brought in newer `x/sys`, `x/term` and `x/text`. Verified locally: `govulncheck ./...` reports no vulnerabilities, and `go test -race ./...` passes (the repo has no test files). 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01MFgbwhfAnf8tMbeKRab9AD Reviewed-on: https://gitea.unbound.se/unboundsoftware/default-request-adder/pulls/414
58 lines
2.4 KiB
AMPL
58 lines
2.4 KiB
AMPL
module gitlab.com/unboundsoftware/default-request-adder
|
|
|
|
go 1.26.0
|
|
|
|
toolchain go1.27.2
|
|
|
|
require (
|
|
k8s.io/api v0.37.1
|
|
k8s.io/apimachinery v0.37.1
|
|
k8s.io/client-go v0.37.1
|
|
)
|
|
|
|
require (
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/emicklei/go-restful/v3 v3.13.0 // indirect
|
|
github.com/fxamacker/cbor/v2 v2.9.1 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-openapi/jsonpointer v1.0.0 // indirect
|
|
github.com/go-openapi/jsonreference v1.0.0 // indirect
|
|
github.com/go-openapi/swag v0.27.1 // indirect
|
|
github.com/go-openapi/swag/cmdutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/conv v0.27.1 // indirect
|
|
github.com/go-openapi/swag/fileutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/loading v0.27.1 // indirect
|
|
github.com/go-openapi/swag/mangling v0.27.1 // indirect
|
|
github.com/go-openapi/swag/netutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/pools v0.27.1 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.27.1 // indirect
|
|
github.com/google/gnostic-models v0.7.0 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
golang.org/x/net v0.61.0 // indirect
|
|
golang.org/x/oauth2 v0.36.0 // indirect
|
|
golang.org/x/sys v0.49.0 // indirect
|
|
golang.org/x/term v0.47.0 // indirect
|
|
golang.org/x/text v0.43.0 // indirect
|
|
golang.org/x/time v0.15.0 // indirect
|
|
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
|
|
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
k8s.io/klog/v2 v2.140.0 // indirect
|
|
k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect
|
|
k8s.io/utils v0.0.0-20260626114624-be93311217bd // indirect
|
|
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
|
|
sigs.k8s.io/randfill v1.0.0 // indirect
|
|
sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|