3 Commits

Author	SHA1	Message	Date
Aaron Gable	1c1c4dcfef	Update certificate-transparency-go to get static/tiled log support (#8150) ... Update github.com/google/certificate-transparency-go from v1.1.6 to v1.3.1. This updates the loglist file schema to recognize logs which are tagged as being tiled logs / implementing the static CT API. Transitively update: - github.com/go-sql-driver/mysql from v1.7.1 to v1.8.1 - github.com/prometheus/client_golang from v1.15.1 to v1.22.0 - github.com/prometheus/client_model from v0.4.0 to v0.6.1 - go.opentelemetry.io/otel from v1.30.0 to v1.31.0 - google.golang.org/grpc from v1.66.1 to v1.69.4 - google.golang.org/protobuf from v1.34.2 to v1.36.5 - and a variety of indirect dependencies Remove one indirect dependency: - github.com/matttproud/golang_protobuf_extensions Add two new indirect dependencies: - filippo.io/edwards25519@v1.1.0 (used by go-sql-driver to handle mariadb's custom encryption implementation) - github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822 (previously inlined into prometheus/common) Also fix two unit tests which need minor modifications to work with updated type signatures and behavior. Part of https://github.com/letsencrypt/boulder/issues/7872	2025-04-30 15:56:31 -07:00
Matthew McPherrin	e8d382aec0	Upgrade the protobuf and grpc dependencies in Boulder (#7232) ... Protobuf v1.32 fixes a potential stack overflow crash. Boulder doesn't expose grpc externally so the risk is minimal, but it seems prudent to upgrade on a regular cadence. IE, this is not a security fix for Boulder.	2024-01-08 11:23:23 -08:00
Aaron Gable	617b6edea4	Update google.golang.org/grpc to v1.59.0 (#7130) ... This version contains mitigations for the HTTP/2 rapid-reset DoS vector. See https://github.com/advisories/GHSA-m425-mq94-257g for details. Changelog: https://github.com/grpc/grpc-go/compare/v1.54.0...v1.59.0	2023-11-02 10:20:14 -04:00