boulder

Commit Graph

Author	SHA1	Message	Date
Aaron Gable	2b8dea9821	Update publicsuffix-go (#7429 ) We last updated the PSL two months ago, and the latest officially-tagged release of publicsuffic-go is just one month old, but the domain prompting the latest request to update the PSL landed just a few days ago, so update to the latest commit rather than the latest release. Also incidentally updates x/crypto, x/net, x/term, and x/sys, but brings in no meaningful updates for any of them. Fixes https://github.com/letsencrypt/boulder/issues/7428	2024-04-15 11:37:11 -07:00
Aaron Gable	eda6e4cb4a	Update OTel dependencies to latest (#7206 ) This resolves https://github.com/advisories/GHSA-8pgv-569h-w5rw and https://github.com/advisories/GHSA-rcjv-mgp8-qvmr, both DoS attacks via metric cardinality explosion in the default OTel http and gRPC middleware.	2023-12-13 09:33:39 -05:00
dependabot[bot]	fa028b4394	build(deps): bump golang.org/x/term from 0.9.0 to 0.11.0 (#7046 ) Bumps [golang.org/x/term](https://github.com/golang/term) from 0.9.0 to 0.11.0. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2023-09-01 13:40:17 -04:00

Author

SHA1

Message

Date

Aaron Gable

2b8dea9821

Update publicsuffix-go (#7429 )

We last updated the PSL two months ago, and the latest officially-tagged
release of publicsuffic-go is just one month old, but the domain
prompting the latest request to update the PSL landed just a few days
ago, so update to the latest commit rather than the latest release.

Also incidentally updates x/crypto, x/net, x/term, and x/sys, but brings
in no meaningful updates for any of them.

Fixes https://github.com/letsencrypt/boulder/issues/7428

2024-04-15 11:37:11 -07:00

Aaron Gable

eda6e4cb4a

Update OTel dependencies to latest (#7206 )

This resolves https://github.com/advisories/GHSA-8pgv-569h-w5rw and
https://github.com/advisories/GHSA-rcjv-mgp8-qvmr, both DoS attacks via
metric cardinality explosion in the default OTel http and gRPC
middleware.

2023-12-13 09:33:39 -05:00

dependabot[bot]

fa028b4394

build(deps): bump golang.org/x/term from 0.9.0 to 0.11.0 (#7046 )

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.9.0 to
0.11.0.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2023-09-01 13:40:17 -04:00

3 Commits