Skip to content

Commit 8e8cdde

Browse files
tac0turtleclaude
tac0turtle
and
claude
authored
chore(deps): fix all open dependabot security alerts (#3388)
* chore(deps): fix all open dependabot security alerts - tools/da-debug: bump golang.org/x/crypto to v0.52.0 and golang.org/x/net to v0.55.0 (7 critical SSH advisories, plus high/medium DoS fixes) - root, apps/testapp, apps/evm, test/e2e: bump quic-go to v0.59.1 (HTTP/3 QPACK trailer expansion memory exhaustion) - apps/loadgen: bump filippo.io/edwards25519 to v1.1.1 - docs: force patched vite ^6.4.3, esbuild ^0.25.0, lodash-es ^4.18.0 via yarn resolutions (vitepress 1.x pins EOL vite 5; vitepress 2 is still alpha) - docs: remove stale package-lock.json — CI workflows only use yarn, the npm lockfile just generated duplicate alerts Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * chore: remove accidentally committed da-debug binary Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * chore(deps): propagate quic-go v0.59.1 sums via just tidy-all Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
1 parent 974265e commit 8e8cdde

17 files changed

Lines changed: 405 additions & 4383 deletions

File tree

‎apps/evm/go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -183,7 +183,7 @@ require (
183183
github.com/prometheus/common v0.67.5 // indirect
184184
github.com/prometheus/procfs v0.20.1 // indirect
185185
github.com/quic-go/qpack v0.6.0 // indirect
186-
github.com/quic-go/quic-go v0.59.0 // indirect
186+
github.com/quic-go/quic-go v0.59.1 // indirect
187187
github.com/quic-go/webtransport-go v0.10.0 // indirect
188188
github.com/sagikazarmark/locafero v0.11.0 // indirect
189189
github.com/shirou/gopsutil v3.21.4-0.20210419000835-c7a38de76ee5+incompatible // indirect

‎apps/evm/go.sum‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -695,8 +695,8 @@ github.com/prysmaticlabs/gohashtree v0.0.4-beta h1:H/EbCuXPeTV3lpKeXGPpEV9gsUpkq
695695
github.com/prysmaticlabs/gohashtree v0.0.4-beta/go.mod h1:BFdtALS+Ffhg3lGQIHv9HDWuHS8cTvHZzrHWxwOtGOs=
696696
github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=
697697
github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=
698-
github.com/quic-go/quic-go v0.59.0 h1:OLJkp1Mlm/aS7dpKgTc6cnpynnD2Xg7C1pwL6vy/SAw=
699-
github.com/quic-go/quic-go v0.59.0/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU=
698+
github.com/quic-go/quic-go v0.59.1 h1:0Gmua0HW1Tv7ANR7hUYwRyD0MG5OJfgvYSZasGZzBic=
699+
github.com/quic-go/quic-go v0.59.1/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU=
700700
github.com/quic-go/webtransport-go v0.10.0 h1:LqXXPOXuETY5Xe8ITdGisBzTYmUOy5eSj+9n4hLTjHI=
701701
github.com/quic-go/webtransport-go v0.10.0/go.mod h1:LeGIXr5BQKE3UsynwVBeQrU1TPrbh73MGoC6jd+V7ow=
702702
github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=

‎apps/loadgen/go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ require (
1919
cosmossdk.io/schema v1.1.0 // indirect
2020
cosmossdk.io/store v1.1.2 // indirect
2121
cosmossdk.io/x/tx v0.14.0 // indirect
22-
filippo.io/edwards25519 v1.1.0 // indirect
22+
filippo.io/edwards25519 v1.1.1 // indirect
2323
github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
2424
github.com/99designs/keyring v1.2.2 // indirect
2525
github.com/DataDog/datadog-go v4.8.3+incompatible // indirect

‎apps/loadgen/go.sum‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,8 @@ cosmossdk.io/store v1.1.2 h1:3HOZG8+CuThREKv6cn3WSohAc6yccxO3hLzwK6rBC7o=
2020
cosmossdk.io/store v1.1.2/go.mod h1:60rAGzTHevGm592kFhiUVkNC9w7gooSEn5iUBPzHQ6A=
2121
cosmossdk.io/x/tx v0.14.0 h1:hB3O25kIcyDW/7kMTLMaO8Ripj3yqs5imceVd6c/heA=
2222
cosmossdk.io/x/tx v0.14.0/go.mod h1:Tn30rSRA1PRfdGB3Yz55W4Sn6EIutr9xtMKSHij+9PM=
23-
filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
24-
filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
23+
filippo.io/edwards25519 v1.1.1 h1:YpjwWWlNmGIDyXOn8zLzqiD+9TyIlPhGFG96P39uBpw=
24+
filippo.io/edwards25519 v1.1.1/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
2525
github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 h1:/vQbFIOMbk2FiG/kXiLl8BRyzTWDw7gX/Hz7Dd5eDMs=
2626
github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4/go.mod h1:hN7oaIRCjzsZ2dE+yG5k+rsdt3qcwykqK6HVGcKwsw4=
2727
github.com/99designs/keyring v1.2.2 h1:pZd3neh/EmUzWONb35LxQfvuY7kiSXAq3HQd97+XBn0=

‎apps/testapp/go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -162,7 +162,7 @@ require (
162162
github.com/prometheus/common v0.67.5 // indirect
163163
github.com/prometheus/procfs v0.20.1 // indirect
164164
github.com/quic-go/qpack v0.6.0 // indirect
165-
github.com/quic-go/quic-go v0.59.0 // indirect
165+
github.com/quic-go/quic-go v0.59.1 // indirect
166166
github.com/quic-go/webtransport-go v0.10.0 // indirect
167167
github.com/sagikazarmark/locafero v0.11.0 // indirect
168168
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect

‎apps/testapp/go.sum‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -618,8 +618,8 @@ github.com/prometheus/procfs v0.20.1 h1:XwbrGOIplXW/AU3YhIhLODXMJYyC1isLFfYCsTEy
618618
github.com/prometheus/procfs v0.20.1/go.mod h1:o9EMBZGRyvDrSPH1RqdxhojkuXstoe4UlK79eF5TGGo=
619619
github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=
620620
github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=
621-
github.com/quic-go/quic-go v0.59.0 h1:OLJkp1Mlm/aS7dpKgTc6cnpynnD2Xg7C1pwL6vy/SAw=
622-
github.com/quic-go/quic-go v0.59.0/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU=
621+
github.com/quic-go/quic-go v0.59.1 h1:0Gmua0HW1Tv7ANR7hUYwRyD0MG5OJfgvYSZasGZzBic=
622+
github.com/quic-go/quic-go v0.59.1/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU=
623623
github.com/quic-go/webtransport-go v0.10.0 h1:LqXXPOXuETY5Xe8ITdGisBzTYmUOy5eSj+9n4hLTjHI=
624624
github.com/quic-go/webtransport-go v0.10.0/go.mod h1:LeGIXr5BQKE3UsynwVBeQrU1TPrbh73MGoC6jd+V7ow=
625625
github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=

0 commit comments

Comments
 (0)