Skip to content

chore: upgrade dependencies to latest versions and fix security vulne… #4237

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

houseme
Copy link
Member

@houseme houseme commented Apr 8, 2025

This PR includes the following updates and fixes:

  • Dependency upgrades: Updated all dependencies in go.mod to their latest versions to ensure compatibility and leverage the latest features and fixes.
  • Security fixes:
    • Resolved known vulnerabilities in golang.org/x/net by upgrading to the latest secure version.
    • Addressed security issues in golang.org/x/crypto by upgrading to the latest secure version.

These changes improve the overall security and stability of the project. Please review the changes and ensure compatibility with the updated dependencies.

…rabilities

- Updated all package dependencies to their latest versions
- Addressed security vulnerabilities in `golang.org/x/net` and `golang.org/x/crypto`
@houseme houseme requested review from gqcn, hailaz and Copilot April 8, 2025 10:24
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 33 out of 53 changed files in this pull request and generated no comments.

Files not reviewed (20)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
  • contrib/drivers/sqlite/go.mod: Language not supported
  • contrib/drivers/sqlitecgo/go.mod: Language not supported
  • contrib/metric/otelmetric/go.mod: Language not supported
  • contrib/nosql/redis/go.mod: Language not supported
  • contrib/registry/consul/go.mod: Language not supported
  • contrib/registry/etcd/go.mod: Language not supported
  • contrib/registry/file/go.mod: Language not supported
  • contrib/registry/nacos/go.mod: Language not supported
  • contrib/registry/polaris/go.mod: Language not supported

@houseme houseme requested a review from Copilot April 8, 2025 10:31
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 37 out of 55 changed files in this pull request and generated no comments.

Files not reviewed (18)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
  • contrib/drivers/sqlite/go.mod: Language not supported
  • contrib/drivers/sqlitecgo/go.mod: Language not supported
  • contrib/metric/otelmetric/go.mod: Language not supported
  • contrib/nosql/redis/go.mod: Language not supported
  • contrib/registry/consul/go.mod: Language not supported
  • contrib/registry/etcd/go.mod: Language not supported
  • contrib/registry/file/go.mod: Language not supported

@houseme houseme requested a review from Copilot April 8, 2025 17:56
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 67 out of 78 changed files in this pull request and generated no comments.

Files not reviewed (11)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
Comments suppressed due to low confidence (13)

container/gvar/gvar_z_example_test.go:18

  • [nitpick] Renaming 'ExampleVarNew' to 'ExampleNew' might break the convention used for Go example tests; please verify that the new name still correctly references the intended example context.
func ExampleNew() {

container/gtree/gtree_z_example_redblacktree_test.go:547

  • [nitpick] Changing the suffix from 'Normal' to 'normal' may impact how the example function is recognized; ensure this rename aligns with Go's example naming conventions.
func ExampleRedBlackTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_redblacktree_test.go:567

  • [nitpick] The rename from 'NoExistKey' to 'noExistKey' may affect test discovery; please confirm that the change preserves the intended exported function behavior.
func ExampleRedBlackTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_redblacktree_test.go:582

  • [nitpick] Modifying 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might alter how Go detects this example; ensure consistency with standard naming conventions.
func ExampleRedBlackTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_btree_test.go:561

  • [nitpick] Changing the suffix 'Normal' to 'normal' could impact example test detection; please verify that this naming style remains compliant with Go's conventions.
func ExampleBTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_btree_test.go:581

  • [nitpick] Renaming from 'NoExistKey' to 'noExistKey' may affect example recognition; confirm that this change does not impact documentation or test execution.
func ExampleBTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_btree_test.go:596

  • [nitpick] Changing 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might interfere with example function lookup; please ensure this naming change is intentional.
func ExampleBTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_avltree_test.go:635

  • [nitpick] Altering 'Normal' to 'normal' in the example function name could affect Go's example detection; please confirm that this adheres to the expected naming guidelines.
func ExampleAVLTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_avltree_test.go:655

  • [nitpick] Renaming 'NoExistKey' to 'noExistKey' may disrupt standard example identification; please verify that the new name meets the necessary conventions.
func ExampleAVLTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_avltree_test.go:670

  • [nitpick] Changing 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might prevent the example from being recognized; ensure that the revised naming complies with Go test conventions.
func ExampleAVLTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gset/gset_z_example_any_test.go:156

  • [nitpick] Modifying 'ContainsI' to 'containsI' alters the case and may affect Go's example test detection; please verify that this name change is deliberate and consistent.
func ExampleSet_containsI() {

container/gring/gring_z_example_test.go:144

  • [nitpick] Changing 'Common' to 'common' in the function name could impact how the example is discovered; please ensure that this renaming maintains the intended usage.
func ExampleRing_Link_common() {

container/gring/gring_z_example_test.go:170

  • [nitpick] Updating 'SameRing' to 'sameRing' might affect example function export; please double-check that the naming follows Go's conventions for examples.
func ExampleRing_Link_sameRing() {

@houseme
Copy link
Member Author

houseme commented Apr 16, 2025

#4244

@Issues-translate-bot
Copy link

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


#4244

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants