From 92a2b7fc4d79d978bfb1c56efef944e9dca072a7 Mon Sep 17 00:00:00 2001 From: Dan Meruelo Date: Fri, 7 Feb 2025 15:39:01 -0500 Subject: [PATCH 1/2] update gorilla/websocket version for Potential DoS Vector --- go.mod | 2 +- go.sum | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index afe404bd..ac180f5b 100644 --- a/go.mod +++ b/go.mod @@ -7,7 +7,7 @@ require ( github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869 // indirect github.com/datadog/datadog-go v0.0.0-20180822151419-281ae9f2d895 github.com/gorilla/mux v1.7.2 - github.com/gorilla/websocket v1.4.0 + github.com/gorilla/websocket v1.5.3 github.com/imdario/mergo v0.3.7 github.com/mccutchen/go-httpbin v1.1.1 github.com/micro/go-micro v1.5.0 diff --git a/go.sum b/go.sum index b8cd2e04..b76e91af 100644 --- a/go.sum +++ b/go.sum @@ -101,8 +101,9 @@ github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+ github.com/gorilla/handlers v1.4.0/go.mod h1:Qkdc/uu4tH4g6mTK6auzZ766c4CA0Ng8+o/OAirnOIQ= github.com/gorilla/mux v1.7.2 h1:zoNxOV7WjqXptQOVngLmcSQgXmgk4NMz1HibBchjl/I= github.com/gorilla/mux v1.7.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs= -github.com/gorilla/websocket v1.4.0 h1:WDFjx/TMzVgy9VdMMQi2K2Emtwi2QcUQsztZ/zLaH/Q= github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ= +github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg= +github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE= github.com/hashicorp/consul/api v1.1.0/go.mod h1:VmuI/Lkw1nC05EYQWNKwWGbkg+FbDBtguAZLlVdkD9Q= github.com/hashicorp/consul/sdk v0.1.1/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8= github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= From 79957c11248ced76029e8067de1b0004440fb61f Mon Sep 17 00:00:00 2001 From: Dan Meruelo Date: Fri, 7 Feb 2025 15:43:54 -0500 Subject: [PATCH 2/2] update to release 3.1.1 --- Makefile | 2 +- scripts/dist.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index bb87bddc..8f068b67 100644 --- a/Makefile +++ b/Makefile @@ -1,4 +1,4 @@ -version := "v3.1.1" +version := "v3.1.2" commit := $(shell git rev-parse --short HEAD) diff --git a/scripts/dist.sh b/scripts/dist.sh index 6a79a3ac..82f99b05 100755 --- a/scripts/dist.sh +++ b/scripts/dist.sh @@ -12,7 +12,7 @@ rm -rf $DIR/dist mkdir -p $DIR/dist arch=$(go env GOARCH) -version='3.1.1' +version='3.1.2' goversion=$(go version | awk '{print $3}') echo "... building v$version for $linux/$arch"