security: update golang.org/x/crypto and golang.org/x/net#11
Closed
chris-mercer wants to merge 1 commit into
Closed
security: update golang.org/x/crypto and golang.org/x/net#11chris-mercer wants to merge 1 commit into
chris-mercer wants to merge 1 commit into
Conversation
Update golang.org/x/ dependencies to latest versions compatible with go 1.21: - golang.org/x/crypto v0.17.0 -> v0.31.0 - golang.org/x/net v0.18.0 -> v0.33.0 - golang.org/x/sys v0.16.0 -> v0.28.0 - golang.org/x/text v0.14.0 -> v0.21.0 - golang.org/x/sync v0.5.0 -> v0.10.0 Closes gap on algorithm reliability improvements and IPv6 address validation fixes in peer discovery. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Member
Author
|
Closing — superseded by #10, which now upgrades Go 1.21 → 1.26 and cascades all x/ dependencies to newer versions than this PR targeted:
All 8 CVEs addressed by this PR's dep bumps are covered by #10's higher versions. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Security: Update Go standard library extensions
Multiple vulnerabilities in
golang.org/x/cryptoandgolang.org/x/netaffect the current codebase, confirmed bygovulncheck.Changes
golang.org/x/cryptogolang.org/x/netgolang.org/x/sysgolang.org/x/syncgolang.org/x/textVerification
go build ./...✅ (on Go 1.24 branch)go mod tidy— cleanReferences
Road to Olympia — Core-Geth Modernization Push (2/24)
Developed by White B0x Inc. for Ethereum Classic DAO LLC
🤖 Generated with Claude Code