Skip to content

v0.2.10

Choose a tag to compare

@TomTonic TomTonic released this 20 Sep 16:17
· 3 commits to main since this release

New Features

Nothing to report this release.

Changed or Fixed Behavior

Nothing to report this release. quic-go (the core dependency) is unchanged at v0.62.0, so there are no inherited changes.

Architectural Changes

Nothing to report this release.

Dependency Updates

Indirect (transitive) module bumps, with no direct dependency or toolchain changes (Go stays at 1.27.1, quic-go stays at v0.62.0):

  • golang.org/x/crypto v0.56.0 -> v0.57.0
  • golang.org/x/net v0.58.0 -> v0.59.0
  • golang.org/x/sys v0.47.0 -> v0.48.0
  • golang.org/x/text v0.41.0 -> v0.42.0

No CVEs were fixed by this update batch. A grype diff of v0.2.9 against HEAD shows identical ID sets.

Advisories Flagged but Not Applicable

  • GO-2026-5932: grype flags it at both v0.2.9 and HEAD. It concerns golang.org/x/crypto/openpgp, which websyncd never imports. govulncheck ./... at HEAD reports 0 affected vulnerabilities, and the one module-level finding is not called by the code.

CI Updates

Nothing to report this release.

Full Changelog: v0.2.9...v0.2.10