Repository navigation
build(deps): bump golang.org/x/crypto from 0.7.0 to 0.52.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp - #23007
Open
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.52.0. - [Commits](golang/crypto@v0.7.0...v0.52.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Multiple unresolved critical defects remain, including a no-op dependency update, an unsupported Go version bump, and concurrency and initialization bugs that can cause invalid behavior, dropped data, or deadlocks.
2 open issues
What changed in this PR
This pull request refreshes the vendored Fasthttp framework test dependencies and related compression libraries.
This pull request requires changes.
Changes:
- Regenerates the module metadata and vendor tree for Fasthttp, Brotli, Klauspost compression, and bytebufferpool.
- Raises the module Go version from 1.20 to 1.25 and removes
golang.org/x/cryptoinstead of upgrading it to v0.52.0. - Review findings remain in dependency metadata, Brotli initialization and negotiation, stackless compression, listener shutdown, client-count synchronization, and per-IP connection cleanup.
| File | Description |
|---|---|
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/modules.txt |
Regenerated vendored module manifest; the advertised golang.org/x/crypto v0.52.0 upgrade is absent. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/workerpool.go |
Adds Fasthttp worker-pool implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/userdata.go |
Adds request user-data storage. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/uri_windows.go |
Adds Windows URI path handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/uri_unix.go |
Adds Unix URI path handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/TODO |
Vendors Fasthttp project metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tls.go |
Adds test certificate generation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/timer.go |
Adds pooled timer helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tcp.go |
Adds Unix connection-reset detection. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tcp_windows.go |
Adds Windows connection-reset detection. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/strings.go |
Adds Fasthttp string constants and lookup values. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/streaming.go |
Adds request streaming support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stream.go |
Adds stream reader and writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/writer.go |
Adds stackless compression writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/func.go |
Adds stackless function execution. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/doc.go |
Documents the stackless package. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/SECURITY.md |
Vendors Fasthttp security policy metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/s2b_old.go |
Adds pre-Go 1.20 string-to-byte conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/s2b_new.go |
Adds Go 1.20+ string-to-byte conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/round2_64.go |
Adds 64-bit slice-capacity rounding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/round2_32.go |
Adds 32-bit slice-capacity rounding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/peripconn.go |
Adds per-client-IP connection tracking; zero-count IP entries are retained. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/nocopy.go |
Adds copy-prevention marker support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/methods.go |
Adds HTTP method constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/LICENSE |
Vendors Fasthttp license metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/lbclient.go |
Adds load-balancing client support; the client-count read is not synchronized. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/headers.go |
Adds HTTP header constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/rsa.pem |
Adds Fasthttp test certificate data. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/rsa.key |
Adds Fasthttp test key data. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/inmemory_listener.go |
Adds in-memory listener and dialer support; pending dials can deadlock shutdown. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/doc.go |
Documents Fasthttp utilities. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/doc.go |
Documents the Fasthttp package. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/coarseTime.go |
Adds coarse time compatibility support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_table.go |
Adds generated byte-conversion tables. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_64.go |
Adds 64-bit byte-conversion constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_32.go |
Adds 32-bit byte-conversion constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/brotli.go |
Adds Brotli compression integration; stackless queue failure is not handled. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/b2s_old.go |
Adds pre-Go 1.20 byte-to-string conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/b2s_new.go |
Adds Go 1.20+ byte-to-string conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/.gitignore |
Vendors Fasthttp repository metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/README.md |
Vendors bytebufferpool documentation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/pool.go |
Adds byte-buffer pooling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/LICENSE |
Vendors bytebufferpool license metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/doc.go |
Documents bytebufferpool. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/bytebuffer.go |
Adds pooled byte-buffer implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/.travis.yml |
Vendors upstream CI metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/zlib/writer.go |
Adds vendored zlib writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/zlib/reader.go |
Adds vendored zlib reader support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/regmask_other.go |
Adds non-amd64 flate register masks. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/regmask_amd64.go |
Adds amd64 flate register masks. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/dict_decoder.go |
Adds flate dictionary decoding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/writer.go |
Adds Brotli writer implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/write_bits.go |
Adds Brotli bitstream writing helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/util.go |
Adds Brotli utility helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/utf8_util.go |
Adds Brotli UTF-8 heuristics. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/symbol_list.go |
Adds Brotli symbol-list helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/ringbuffer.go |
Adds Brotli ring-buffer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/README.md |
Vendors Brotli documentation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/reader.go |
Adds Brotli reader implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/quality.go |
Adds Brotli compression-quality parameters. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/prefix.go |
Adds Brotli prefix encoding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/platform.go |
Adds Brotli platform helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/params.go |
Adds Brotli encoder parameters. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_literal.go |
Adds Brotli literal metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_distance.go |
Adds Brotli distance metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_command.go |
Adds Brotli command metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/memory.go |
Adds Brotli buffer-capacity helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/literal_cost.go |
Adds Brotli literal cost estimation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/LICENSE |
Vendors Brotli license metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/http.go |
Adds HTTP compression negotiation; identity, wildcard precedence, and Vary handling require fixes. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/histogram.go |
Adds Brotli histogram handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/hash_rolling.go |
Adds rolling hash support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/hash_composite.go |
Adds composite hash support; non-nil child hashers are not initialized. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/find_match_length.go |
Adds match-length calculation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/encoder_dict.go |
Adds Brotli encoder dictionary support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/constants.go |
Adds Brotli format constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/cluster.go |
Adds histogram clustering helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/cluster_command.go |
Adds command histogram clustering. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/block_splitter.go |
Adds Brotli block-splitting utilities. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/backward_references.go |
Adds Brotli backward-reference generation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/go.mod |
Updates module metadata, raises the minimum Go version to 1.25.0, and removes the advertised golang.org/x/crypto dependency. |
Review effort: Lite (auto)
| module fastHttpModel | ||
|
|
||
| go 1.20 | ||
| go 1.25.0 |
| github.com/sergi/go-diff v1.1.0 // indirect | ||
| github.com/shogo82148/go-shuffle v0.0.0-20170808115208-59829097ff3b // indirect | ||
| github.com/shurcooL/sanitized_anchor_name v0.0.0-20170918181015-86672fcb3f95 // indirect | ||
| github.com/valyala/bytebufferpool v1.0.0 // indirect |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps golang.org/x/crypto from 0.7.0 to 0.52.0.
Commits
a1c0d99go.mod: update golang.org/x dependencies3c7c869ssh: fix deadlock on unexpected channel responses533fb3fssh: fix source-address critical option bypassabbc44dssh: fix incorrect operator ordere052873ssh: fix infinite loop on large channel writes due to integer overflowb61cf85ssh: enforce user presence verification for security keys9c2cd33ssh: enforce strict limits on DSA key parameters8907318ssh: reject RSA keys with excessively large moduliffd87b4ssh: fix panic when authority callbacks are nil4e7a738ssh: fix deadlock on unexpected global responsesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.