bvandeusen/minstrel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 38 Wiki Activity

chore(deps): Go server bumps (x/crypto, pgx, migrate, pgerrcode)

Browse Source 
Direct bumps:
- golang.org/x/crypto v0.35.0 → v0.51.0 (security backports;
  single highest-priority bump in the audit)
- github.com/jackc/pgx/v5 v5.7.4 → v5.9.2
- github.com/golang-migrate/migrate/v4 v4.18.2 → v4.19.1
- github.com/jackc/pgerrcode 2022-04-16 → 2025-09-07 (untagged
  pseudo refresh)

Side effects (good):
- `go mod tidy` dropped three transitives that migrate v4.18
  pulled in but v4.19 no longer needs: hashicorp/errwrap,
  hashicorp/go-multierror, go.uber.org/atomic.

Toolchain note:
- `go.mod` `go` directive auto-bumped 1.23.0 → 1.25.0 because
  x/crypto v0.51.0 declares Go 1.25 as its minimum. If the
  go-ci runner image isn't on Go 1.25+, CI will bounce on
  this; the runner image bump is operator infra (memory:
  project_forgejo_ci.md). Tracked in Fable #464.

Reference: Fable #464 + audit note #460.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Bryan Van Deusen
2026-05-20 13:02:32 -04:00
parent 750bc69204
commit 6a62120457
2 changed files with 47 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go.mod
+9 -12
View File
@@ -1,32 +1,29 @@
module git.fabledsword.com/bvandeusen/minstrel
go 1.23.0
go 1.25.0
require (
github.com/dhowden/tag v0.0.0-20240417053706-3d75831295e8
github.com/go-chi/chi/v5 v5.2.5
github.com/go-co-op/gocron/v2 v2.21.2
github.com/golang-migrate/migrate/v4 v4.18.2
github.com/golang-migrate/migrate/v4 v4.19.1
github.com/google/uuid v1.6.0
github.com/jackc/pgerrcode v0.0.0-20220416144525-469b46aa5efa
github.com/jackc/pgx/v5 v5.7.4
github.com/jackc/pgerrcode v0.0.0-20250907135507-afb5586c32a6
github.com/jackc/pgx/v5 v5.9.2
github.com/stretchr/testify v1.11.1
golang.org/x/crypto v0.35.0
golang.org/x/crypto v0.51.0
gopkg.in/yaml.v3 v3.0.1
)
require (
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/jonboulle/clockwork v0.5.0 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/robfig/cron/v3 v3.0.1 // indirect
github.com/rogpeppe/go-internal v1.14.1 // indirect
go.uber.org/atomic v1.7.0 // indirect
golang.org/x/sync v0.11.0 // indirect
golang.org/x/text v0.22.0 // indirect
golang.org/x/sync v0.20.0 // indirect
golang.org/x/text v0.37.0 // indirect
)