Skip to content

fix(security): upgrade 2 vulnerable dependencies - #3

Open
dennislee928 wants to merge 14 commits into
mainfrom
vuln-sentinel/security-fixes
Open

dennislee928 wants to merge 14 commits into
mainfrom
vuln-sentinel/security-fixes

Conversation

@dennislee928

@dennislee928 dennislee928 commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Automated security upgrades from vuln-sentinel.

Package Ecosystem Upgrade to Vulns fixed
golang.org/x/crypto Go v0.56.0 30
golang.org/x/sys Go v0.44.0 1

Closes #4
Closes #5

vuln-sentinel merges this PR once all CI checks pass. If the repository has no CI, it waits for a manual merge. Lockfiles were regenerated with each ecosystem's own tool, with install scripts disabled.

@dennislee928 dennislee928 added security vuln-sentinel Vulnerable dependency tracked by vuln-sentinel labels Oct 28, 2026
Copilot AI balanced review requested due to automatic review settings October 28, 2026 21:27
@dennislee928 dennislee928 changed the title fix(security): upgrade vulnerable dependencies fix(security): upgrade 10 vulnerable dependencies Oct 28, 2026
@netlify

netlify Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for xdevice-infocard canceled.

Name Link
🔨 Latest commit a20c523
🔍 Latest deploy log https://app.netlify.com/projects/xdevice-infocard/deploys/6ae84ca09370fb3d8a99f314

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

…web3-sbt-contacts/backend-relayer/go.mod (Go CRITICAL)
…3-sbt-contacts/backend-relayer/go.mod (Go UNKNOWN)
@dennislee928 dennislee928 changed the title fix(security): upgrade 10 vulnerable dependencies fix(security): upgrade 2 vulnerable dependencies Nov 1, 2026
…web3-sbt-contacts/backend-relayer/go.mod (Go CRITICAL)
…3-sbt-contacts/backend-relayer/go.mod (Go UNKNOWN)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security vuln-sentinel Vulnerable dependency tracked by vuln-sentinel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[vuln-sentinel] UNKNOWN Go golang.org/x/sys: 1 known vulnerability [vuln-sentinel] CRITICAL Go golang.org/x/crypto: 30 known vulnerabilities

2 participants