From 36e17ad1da9f0d6482b87cb2665c9ab05a67d220 Mon Sep 17 00:00:00 2001 From: AshSgDe29071999 Date: Wed, 26 Aug 2026 19:02:54 +0530 Subject: [PATCH] Bump go-sql-driver/mysql to v1.10.0 v1.8.1 pulls filippo.io/edwards25519 v1.1.0 (CVE-2026-26958). The driver v1.10.0 depends on edwards25519 v1.2.0. Fixes #994 --- go.mod | 6 ++++-- go.sum | 8 ++++---- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index 9b164a1c1..e18be77e5 100644 --- a/go.mod +++ b/go.mod @@ -1,9 +1,11 @@ module github.com/jmoiron/sqlx -go 1.10 +go 1.24.0 require ( - github.com/go-sql-driver/mysql v1.8.1 + github.com/go-sql-driver/mysql v1.10.0 github.com/lib/pq v1.10.9 github.com/mattn/go-sqlite3 v1.14.22 ) + +require filippo.io/edwards25519 v1.2.0 // indirect diff --git a/go.sum b/go.sum index 31d5abac8..cb08a7f05 100644 --- a/go.sum +++ b/go.sum @@ -1,7 +1,7 @@ -filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= -filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= -github.com/go-sql-driver/mysql v1.8.1 h1:LedoTUt/eveggdHS9qUFC1EFSa8bU2+1pZjSRpvNJ1Y= -github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg= +filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo= +filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc= +github.com/go-sql-driver/mysql v1.10.0 h1:Q+1LV8DkHJvSYAdR83XzuhDaTykuDx0l6fkXxoWCWfw= +github.com/go-sql-driver/mysql v1.10.0/go.mod h1:M+cqaI7+xxXGG9swrdeUIoPG3Y3KCkF0pZej+SK+nWk= github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw= github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o= github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=