Commit 2480262fcd
2480262fcd9de21680b7fdd21ae30c5ab65b7ec9
parent: 57ae9420a9
Verified · cmc ci/build: success ci/test: success
cmc <hello@cleberg.net> · 2026-09-01T03:52:23Z
Bump go.yaml.in/yaml/v3 and golang.org/x/net
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5, golang.org/x/net v0.57.0 -> v0.58.0.
go mod tidy moves golang.org/x/image to the direct block; 57ae942 imports
it for PNG badge encoding.
govulncheck is clean: 0 called vulnerabilities. The one module-graph
finding, GO-2026-5932 on golang.org/x/crypto/openpgp, is unreachable —
internal/sig uses ProtonMail/go-crypto and x/crypto is in the graph for
ssh and term.
Closes #60
go.mod
+3 −3
| @@ -11,9 +11,10 @@ require ( |
| 11 | 11 | github.com/spf13/cobra v1.10.2 |
| 12 | 12 | github.com/yuin/goldmark v1.8.5 |
| 13 | 13 | github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc |
| 14 | | go.yaml.in/yaml/v3 v3.0.4 |
| 14 | go.yaml.in/yaml/v3 v3.0.5 |
| 15 | 15 | golang.org/x/crypto v0.55.0 |
| 16 | | golang.org/x/net v0.57.0 |
| 16 | golang.org/x/image v0.45.0 |
| 17 | golang.org/x/net v0.58.0 |
| 17 | 18 | golang.org/x/term v0.45.0 |
| 18 | 19 | modernc.org/sqlite v1.57.0 |
| 19 | 20 | ) |
| @@ -32,7 +33,6 @@ require ( |
| 32 | 33 | github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect |
| 33 | 34 | github.com/russross/blackfriday/v2 v2.1.0 // indirect |
| 34 | 35 | github.com/spf13/pflag v1.0.9 // indirect |
| 35 | | golang.org/x/image v0.45.0 // indirect |
| 36 | 36 | golang.org/x/sys v0.47.0 // indirect |
| 37 | 37 | golang.org/x/text v0.41.0 // indirect |
| 38 | 38 | modernc.org/libc v1.74.4 // indirect |
go.sum
+4 −4
| @@ -61,16 +61,17 @@ github.com/yuin/goldmark v1.8.5 h1:r6N5afV5qj/5S4UTch8agZHJ8UxNCMwX7WjkkJam2NA= |
| 61 | 61 | github.com/yuin/goldmark v1.8.5/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg= |
| 62 | 62 | github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc h1:+IAOyRda+RLrxa1WC7umKOZRsGq4QrFFMYApOeHzQwQ= |
| 63 | 63 | github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc/go.mod h1:ovIvrum6DQJA4QsJSovrkC4saKHQVs7TvcaeO8AIl5I= |
| 64 | | go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc= |
| 65 | 64 | go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= |
| 65 | go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw= |
| 66 | go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg= |
| 66 | 67 | golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= |
| 67 | 68 | golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= |
| 68 | 69 | golang.org/x/image v0.45.0 h1:FMb1nTbH5H9vF55SriQHgFw5GnNL9Jg6L25BwXKzhB0= |
| 69 | 70 | golang.org/x/image v0.45.0/go.mod h1:n62x/7RqlwXDvGsSU4u6IUTUf6KghUZ9Bt7cG/T9Fx4= |
| 70 | 71 | golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk= |
| 71 | 72 | golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40= |
| 72 | | golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE= |
| 73 | | golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU= |
| 73 | golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= |
| 74 | golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= |
| 74 | 75 | golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= |
| 75 | 76 | golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= |
| 76 | 77 | golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= |
| @@ -81,7 +82,6 @@ golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= |
| 81 | 82 | golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= |
| 82 | 83 | golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE= |
| 83 | 84 | golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk= |
| 84 | | gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM= |
| 85 | 85 | gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= |
| 86 | 86 | gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= |
| 87 | 87 | modernc.org/cc/v4 v4.29.1 h1:MKgdCV3WykTSPqpVrnxdEDS0HEd2FHpKZDzxzU5LyeI= |