Repository navigation
build(deps): bump github.com/go-git/go-git/v5 from 5.1.0 to 5.19.2 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp - #23008
Open
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.1.0 to 5.19.2. - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.1.0...v5.19.2) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The change has unresolved dependency-update omissions, an unsupported Go 1.25 minimum, and critical concurrency and Brotli error-handling defects.
2 open issues
What changed in this PR
This pull request refreshes the vendored Fasthttp framework-test dependencies, but it does not apply the advertised github.com/go-git/go-git/v5 5.19.2 update. It also raises the test module minimum Go version to 1.25.0.
Changes:
- Regenerates
go.modandvendor/modules.txt, removinggo-git. - Adds vendored Fasthttp, Brotli, compression, and byte-buffer dependencies.
- Adds platform-specific helpers, TLS fixtures, licenses, and documentation.
- Leaves unresolved critical issues in the Go version change, Brotli compression fallback, and load-balancing client synchronization.
This pull request requires changes.
| File | Summary |
|---|---|
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/modules.txt |
Regenerates the vendor manifest; moderate issue: the advertised go-git 5.19.2 dependency and packages are absent. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/userdata.go |
Adds Fasthttp request user-data storage. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/uri_windows.go |
Adds Windows URI path handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/uri_unix.go |
Adds Unix URI path handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/TODO |
Adds upstream Fasthttp TODO metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tls.go |
Adds test certificate generation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/timer.go |
Adds pooled timer helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tcp.go |
Adds Unix connection-reset detection. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/tcp_windows.go |
Adds Windows connection-reset detection. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/strings.go |
Adds shared HTTP string constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/streaming.go |
Adds request streaming support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stream.go |
Adds stream reader and writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/writer.go |
Adds stackless compression writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/func.go |
Adds stackless function execution. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/stackless/doc.go |
Documents the stackless package. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/SECURITY.md |
Adds upstream security-policy metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/s2b_old.go |
Adds pre-Go 1.20 string-to-byte conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/s2b_new.go |
Adds Go 1.20+ string-to-byte conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/round2_64.go |
Adds 64-bit slice-capacity rounding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/round2_32.go |
Adds 32-bit slice-capacity rounding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/peripconn.go |
Adds per-client-IP connection tracking. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/nocopy.go |
Adds no-copy marker support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/methods.go |
Adds HTTP method constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/LICENSE |
Adds the Fasthttp license. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/lbclient.go |
Adds load-balancing client support; critical issue: client-slice length is read outside the mutex. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/headers.go |
Adds HTTP header constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/rsa.pem |
Adds TLS test certificate data. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/rsa.key |
Adds TLS test private-key data. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/inmemory_listener.go |
Adds an in-memory listener implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/fasthttputil/doc.go |
Documents the utility package. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/doc.go |
Documents the Fasthttp package. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/coarseTime.go |
Adds coarse time support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_table.go |
Adds generated byte-conversion tables. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_64.go |
Adds 64-bit byte-conversion constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/bytesconv_32.go |
Adds 32-bit byte-conversion constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/brotli.go |
Integrates Brotli compression; critical issue: a failed stackless enqueue is ignored and can report success without writing data. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/b2s_old.go |
Adds pre-Go 1.20 byte-to-string conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/b2s_new.go |
Adds Go 1.20+ byte-to-string conversion. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/fasthttp/.gitignore |
Adds upstream ignore rules. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/README.md |
Adds bytebufferpool project metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/pool.go |
Adds pooled byte-buffer management. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/LICENSE |
Adds the bytebufferpool license. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/doc.go |
Documents bytebufferpool. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/bytebuffer.go |
Adds the byte-buffer implementation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/valyala/bytebufferpool/.travis.yml |
Adds upstream CI metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/zlib/writer.go |
Adds zlib writing support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/zlib/reader.go |
Adds zlib reading support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/regmask_other.go |
Adds non-amd64 register masks. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/regmask_amd64.go |
Adds amd64 register masks. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/klauspost/compress/flate/dict_decoder.go |
Adds DEFLATE dictionary decoding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/writer.go |
Adds Brotli writer support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/write_bits.go |
Adds Brotli bitstream writing. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/util.go |
Adds Brotli utility assertions. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/utf8_util.go |
Adds UTF-8 detection utilities. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/symbol_list.go |
Adds Brotli symbol-list helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/ringbuffer.go |
Adds Brotli ring-buffer management. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/README.md |
Adds Brotli project metadata. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/reader.go |
Adds Brotli reader support. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/quality.go |
Adds Brotli compression-quality configuration. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/prefix.go |
Adds Brotli prefix encoding. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/platform.go |
Adds Brotli platform helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/params.go |
Adds Brotli encoder parameters. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_literal.go |
Adds literal metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_distance.go |
Adds distance metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/metablock_command.go |
Adds command metablock splitting. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/memory.go |
Adds Brotli buffer-capacity helpers. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/literal_cost.go |
Adds literal bit-cost estimation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/LICENSE |
Adds the Brotli license. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/http.go |
Adds HTTP compression negotiation. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/histogram.go |
Adds Brotli histogram handling. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/hash_rolling.go |
Adds rolling-hash matching. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/hash_composite.go |
Adds composite hash matching. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/find_match_length.go |
Adds match-length detection. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/encoder_dict.go |
Adds encoder dictionary initialization. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/constants.go |
Adds Brotli format constants. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/cluster.go |
Adds histogram clustering primitives. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/cluster_command.go |
Adds command histogram clustering. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/vendor/github.com/andybalholm/brotli/block_splitter.go |
Adds Brotli block-split utilities. |
go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/go.mod |
Updates module metadata; critical issue: raises the minimum Go version from 1.20 to 1.25.0. Moderate issue: removes github.com/go-git/go-git/v5 instead of updating it to 5.19.2. |
Review effort: Lite (auto)
| module fastHttpModel | ||
|
|
||
| go 1.20 | ||
| go 1.25.0 |
Comment on lines
8
to
10
| github.com/andybalholm/brotli v1.0.5 // indirect | ||
| github.com/dgryski/go-minhash v0.0.0-20170608043002-7fe510aff544 // indirect | ||
| github.com/ekzhu/minhash-lsh v0.0.0-20171225071031-5c06ee8586a1 // indirect | ||
| github.com/emirpasic/gods v1.12.0 // indirect | ||
| github.com/github/depstubber v0.0.0-20211124194836-d0e8ca3d2e44 // indirect | ||
| github.com/go-enry/go-license-detector/v4 v4.0.0 // indirect | ||
| github.com/go-git/gcfg v1.5.0 // indirect | ||
| github.com/go-git/go-billy/v5 v5.0.0 // indirect | ||
| github.com/go-git/go-git/v5 v5.1.0 // indirect | ||
| github.com/golang/dep v0.5.4 // indirect | ||
| github.com/hhatto/gorst v0.0.0-20181029133204-ca9f730cac5b // indirect | ||
| github.com/imdario/mergo v0.3.9 // indirect | ||
| github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect | ||
| github.com/jdkato/prose v1.1.0 // indirect | ||
| github.com/kevinburke/ssh_config v0.0.0-20190725054713-01f96b0aa0cd // indirect | ||
| github.com/klauspost/compress v1.16.3 // indirect | ||
| github.com/mitchellh/go-homedir v1.1.0 // indirect | ||
| github.com/montanaflynn/stats v0.0.0-20151014174947-eeaced052adb // indirect | ||
| github.com/pkg/errors v0.9.1 // indirect | ||
| github.com/russross/blackfriday/v2 v2.0.1 // indirect | ||
| github.com/sergi/go-diff v1.1.0 // indirect | ||
| github.com/shogo82148/go-shuffle v0.0.0-20170808115208-59829097ff3b // indirect | ||
| github.com/shurcooL/sanitized_anchor_name v0.0.0-20170918181015-86672fcb3f95 // indirect | ||
| github.com/valyala/bytebufferpool v1.0.0 // indirect |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github.com/go-git/go-git/v5 from 5.1.0 to 5.19.2.
Release notes
Sourced from github.com/go-git/go-git/v5's releases.
... (truncated)
Commits
3eeb238Merge pull request #2277 from go-git/checkout-v5008a78fgit: worktree, make the filesystem wrapper a symlink-safe boundary2263fb5Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...77b7625build: Update module golang.org/x/text to v0.39.0 [SECURITY]85ea767Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...198675abuild: Update module golang.org/x/net to v0.56.0 [SECURITY]4a0e66dMerge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment3b306efstorage: dotgit, align reference-name safety with refname_is_safef3d0cc1storage: dotgit, reject path traversal in reference names979cfe9Merge pull request #2262 from joshblum/joshblum/to-slash-v5Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.