Skip to content

silo-pkg v3.13.2

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 03 Sep 06:01
· 1 commit to main since this release
v3.13.2
6ad4c41
This commit was signed with the committer’s verified signature.
Vonng Feng Ruohang
GPG key ID: E7935D8DB9BD8B20
Verified
Learn about vigilant mode.

Dependency and toolchain refresh

  • Builds the maintained branch with Go 1.27.1 while retaining go 1.26.0 as the tested consumer floor.
  • Updates every dependency used by the package or its tests to the current compatible release, including OIDC v3.21.0, JWX v3.2.0, OpenAPI swag/conv v0.29.1, MinIO mux v1.10.1, gRPC v1.83.2, protobuf v1.36.12, and grpc-gateway v2.30.0.
  • Keeps github.com/minio/minio-go/v7 at upstream master commit 0e78d3f18efe; the latest v7.3.0 tag is older and would be a downgrade.
  • Keeps go-systemd at v22.6.0 because v22.7.0 does not compile on NetBSD.

Security

  • Updates golang.org/x/crypto to v0.56.0, fixing GO-2026-6354 and GO-2026-6355 in SSH server channels.
  • Updates gRPC beyond v1.83.1, the first fixed release for CVE-2026-84304.
  • govulncheck ./... reports no reachable vulnerabilities.

Validation

  • Go 1.27.1: lint and race-enabled package suite passed.
  • Go 1.26.8 with GOTOOLCHAIN=local: race-enabled package suite passed.
  • NetBSD/amd64 compile-only suite passed with the portability pin.
  • Exact commit 6ad4c4147d431881d7a09e94da380c62d197342f: Go, LDAP Config Validator, and VulnCheck all succeeded.

Upgrade

go get github.com/pgsty/silo-pkg/v3@v3.13.2

v3.13.1 was previously recorded by the public Go checksum database before its Git tag was withdrawn. Go module versions are immutable once indexed, so this release intentionally advances to v3.13.2 rather than reusing that version.

Assets 2
Loading