From cf82feca0659d8e9d78179a6eb02d64e433ef28b Mon Sep 17 00:00:00 2001 From: Tobias Gesellchen Date: Sat, 7 Mar 2026 12:45:21 +0100 Subject: [PATCH] security: upgrade Go to 1.26.1 and update dependencies - Update Go version to 1.26.1 in go.mod and examples to address: - GO-2026-4602 (os: FileInfo escape) - GO-2026-4601 (net/url: IPv6 host literal parsing) - GO-2026-4600 (crypto/x509: panic in name constraint checking) - GO-2026-4599 (crypto/x509: incorrect email constraint enforcement) - Upgrade golang.org/x/* and other dependencies to latest stable versions. - Synchronize go.sum via go mod tidy. Co-authored-by: Junie --- Dockerfile | 2 +- examples/navigation-station-demo/go.mod | 4 ++-- examples/preset-management/go.mod | 4 ++-- go.mod | 4 ++-- go.sum | 4 ++-- 5 files changed, 9 insertions(+), 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index d96b7ef..373ef53 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # Build stage -FROM --platform=$BUILDPLATFORM golang:1.26.0-alpine AS builder +FROM --platform=$BUILDPLATFORM golang:1.26.1-alpine AS builder # Declare automatic platform ARGs to make them available in build stage # See https://docs.docker.com/reference/dockerfile#automatic-platform-args-in-the-global-scope diff --git a/examples/navigation-station-demo/go.mod b/examples/navigation-station-demo/go.mod index e6dfb34..5054974 100644 --- a/examples/navigation-station-demo/go.mod +++ b/examples/navigation-station-demo/go.mod @@ -1,8 +1,8 @@ module navigation-station-demo -go 1.25.7 +go 1.26.1 -require github.com/gesellix/bose-soundtouch v0.0.0 +require github.com/gesellix/bose-soundtouch v0.43.0 require github.com/gorilla/websocket v1.5.3 // indirect diff --git a/examples/preset-management/go.mod b/examples/preset-management/go.mod index 41d6279..474c725 100644 --- a/examples/preset-management/go.mod +++ b/examples/preset-management/go.mod @@ -1,8 +1,8 @@ module preset-management-example -go 1.25.7 +go 1.26.1 -require github.com/gesellix/bose-soundtouch v0.0.0 +require github.com/gesellix/bose-soundtouch v0.43.0 require github.com/gorilla/websocket v1.5.3 // indirect diff --git a/go.mod b/go.mod index 2c211af..a445632 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/gesellix/bose-soundtouch -go 1.25.7 +go 1.26.1 require ( github.com/go-chi/chi/v5 v5.2.5 @@ -14,7 +14,7 @@ require ( require ( github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect - github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect + github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342 // indirect golang.org/x/mod v0.33.0 // indirect golang.org/x/net v0.51.0 // indirect golang.org/x/sync v0.19.0 // indirect diff --git a/go.sum b/go.sum index 80d77a1..ea60d5e 100644 --- a/go.sum +++ b/go.sum @@ -15,8 +15,8 @@ github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/urfave/cli/v2 v2.27.7 h1:bH59vdhbjLv3LAvIu6gd0usJHgoTTPhCFib8qqOwXYU= github.com/urfave/cli/v2 v2.27.7/go.mod h1:CyNAG/xg+iAOg0N4MPGZqVmv2rCoP267496AOXUZjA4= -github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 h1:gEOO8jv9F4OT7lGCjxCBTO/36wtF6j2nSip77qHd4x4= -github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM= +github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342 h1:FnBeRrxr7OU4VvAzt5X7s6266i6cSVkkFPS0TuXWbIg= +github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=