Skip to content

chore: bump deps#1063

Merged
rvagg merged 5 commits intofilecoin-project:mainfrom
hanabi1224:hm/bump-deps
Jan 28, 2026
Merged

chore: bump deps#1063
rvagg merged 5 commits intofilecoin-project:mainfrom
hanabi1224:hm/bump-deps

Conversation

@hanabi1224
Copy link
Copy Markdown
Contributor

All changes are generated by go get -u && go mod tidy

Comment thread go.mod Outdated
golang.org/x/sync v0.15.0
golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028
go.uber.org/zap v1.27.1
golang.org/x/crypto v0.47.0
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see #1055 - we have to hold back at v0.44 until we sort out a new keccak

Copy link
Copy Markdown
Contributor Author

@hanabi1224 hanabi1224 Jan 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Downgraded crypto by running go get -u golang.org/x/crypto@v0.43.0 (v0.44 seems to be released after golang/crypto@cf29fa9)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rvagg BTW, I notice that Lotus is using crypto@v0.45.0. Should it be downgraded as well?
https://github.com/filecoin-project/lotus/blob/master/go.mod#L158

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes it should! looks like I let my guard down filecoin-project/lotus#13442 thanks

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hanabi1224 hanabi1224 marked this pull request as ready for review January 27, 2026 11:31
@hanabi1224 hanabi1224 requested a review from rvagg January 27, 2026 11:31
Copy link
Copy Markdown
Member

@rvagg rvagg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wew, them's some out of date dependencies!

@github-project-automation github-project-automation Bot moved this from Todo to In review in F3 Jan 27, 2026
@rvagg rvagg merged commit dc95659 into filecoin-project:main Jan 28, 2026
10 checks passed
@github-project-automation github-project-automation Bot moved this from In review to Done in F3 Jan 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants