Skip to content

fix: go deps and update nancy exceptions#44

Merged
mrz1836 merged 4 commits into
mainfrom
fix/go-deps
Apr 7, 2026
Merged

fix: go deps and update nancy exceptions#44
mrz1836 merged 4 commits into
mainfrom
fix/go-deps

Conversation

@mrz1836
Copy link
Copy Markdown
Collaborator

@mrz1836 mrz1836 commented Apr 7, 2026

This pull request primarily updates dependencies in the go.mod file to newer versions and adds a new indirect dependency. It also updates CVE exclusion lists in the project environment configuration.

Dependency updates:

  • Updated several core dependencies to newer versions, including github.com/bsv-blockchain/go-chaintracks, github.com/bsv-blockchain/go-sdk, github.com/bsv-blockchain/teranode, github.com/valyala/fasthttp, and modernc.org/sqlite.
  • Updated various indirect dependencies, such as AWS SDK modules, github.com/andybalholm/brotli, github.com/lib/pq, github.com/mattn/go-runewidth, github.com/mr-tron/base58, github.com/pion/stun/v3, and others. [1] [2] [3] [4] [5] [6] [7] [8]
  • Updated all OpenTelemetry-related dependencies to version 1.43.0 and related contrib modules to 0.68.0.
  • Updated Google API and RPC proto dependencies to a newer version.
  • Added a new indirect dependency: github.com/bsv-blockchain/testcontainers-aerospike-go v0.3.6.

Configuration updates:

  • Added CVE-2026-34986 to both the NANCY_EXCLUDES and MAGE_X_CVE_EXCLUDES environment variables in .github/env/90-project.env.

mrz1836 added 2 commits April 7, 2026 10:06
Updated various dependencies in go.mod to their latest versions for improved stability and performance.
@mrz1836 mrz1836 added dependencies Dependency updates, version bumps, etc. hot-fix Urgent or important fix/patch go Pull requests that update go code labels Apr 7, 2026
@github-actions github-actions Bot added bug-P3 Lowest rated bug, affects nearly none or low-impact chore Simple dependency updates or version bumps labels Apr 7, 2026
@mrz1836 mrz1836 merged commit ed88743 into main Apr 7, 2026
45 checks passed
@github-actions github-actions Bot deleted the fix/go-deps branch April 7, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug-P3 Lowest rated bug, affects nearly none or low-impact chore Simple dependency updates or version bumps dependencies Dependency updates, version bumps, etc. go Pull requests that update go code hot-fix Urgent or important fix/patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant