From 85ed7f990eca91eb7e60da96e3f6919ec06d46c3 Mon Sep 17 00:00:00 2001 From: TheusHen Date: Fri, 4 Sep 2026 23:28:53 -0300 Subject: [PATCH] security: bump protocol Go deps - implementations/go/go.mod: go 1.22 -> 1.25.0 - golang.org/x/crypto 0.31.0 -> 0.55.0 (CVE-2024-45337 etc) - klauspost/compress 1.17.11 -> 1.19.2 (s2 OOM fix) - golang.org/x/sys 0.28.0 -> 0.47.0 Keeps protocol in sync with relay/trace 1.25 toolchain. --- implementations/go/go.mod | 8 ++++---- implementations/go/go.sum | 12 ++++++------ 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/implementations/go/go.mod b/implementations/go/go.mod index edf4be0..9dc9f0e 100644 --- a/implementations/go/go.mod +++ b/implementations/go/go.mod @@ -1,10 +1,10 @@ module github.com/laststate/protocol/implementations/go -go 1.22 +go 1.25.0 require ( - github.com/klauspost/compress v1.17.11 - golang.org/x/crypto v0.31.0 + github.com/klauspost/compress v1.19.2 + golang.org/x/crypto v0.55.0 ) -require golang.org/x/sys v0.28.0 // indirect +require golang.org/x/sys v0.47.0 // indirect diff --git a/implementations/go/go.sum b/implementations/go/go.sum index 2be623d..f3275ac 100644 --- a/implementations/go/go.sum +++ b/implementations/go/go.sum @@ -1,6 +1,6 @@ -github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc= -github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0= -golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= -golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= -golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= -golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +github.com/klauspost/compress v1.19.2 h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8= +github.com/klauspost/compress v1.19.2/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= +golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= +golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= +golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= +golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=