Skip to content

v0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@maguro maguro released this 18 Sep 19:28
· 13 commits to master since this release
v0.5.0
13d6769

An alpha release. The API can still change before v1.0.

Breaking

  • Yama now requires Go 1.26 or later. The go line in go.mod is 1.26.0. An application on Go 1.25 must upgrade Go before it upgrades Yama.

Fixed

  • Vulnerable dependencies. golang.org/x/mod moves to v0.41.0 and golang.org/x/text moves to v0.42.0. These versions fix GO-2026-6179, GO-2026-6180, and GO-2026-5970. govulncheck found no call from Yama to the affected code.

New

  • A security policy. SECURITY.md states how to report a vulnerability through GitHub private vulnerability reporting.

Changed

  • golang.org/x/tools moves to v0.50.0.

Full changes: v0.4.0...v0.5.0

Assets 2
Loading