Skip to content

fix: update dependencies to resolve security vulnerabilities#12

Merged
evertoncolling merged 1 commit into
mainfrom
fix-dependabot-alerts
Jul 3, 2025
Merged

fix: update dependencies to resolve security vulnerabilities#12
evertoncolling merged 1 commit into
mainfrom
fix-dependabot-alerts

Conversation

@evertoncolling

Copy link
Copy Markdown
Owner

Summary

  • Updated github.com/golang-jwt/jwt/v5 from v5.0.0 to v5.2.2 to fix CVE-2025-30204 (high severity)
  • Updated google.golang.org/protobuf from v1.26.0 to v1.33.0 to fix CVE-2024-24786 (medium severity)

Test plan

  • Dependencies updated successfully
  • Project builds without errors
  • All security vulnerabilities resolved

🤖 Generated with Claude Code

- Update github.com/golang-jwt/jwt/v5 from v5.0.0 to v5.2.2 (CVE-2025-30204)
- Update google.golang.org/protobuf from v1.26.0 to v1.33.0 (CVE-2024-24786)

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
@evertoncolling evertoncolling enabled auto-merge July 3, 2025 21:59
@codecov

codecov Bot commented Jul 3, 2025

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 8.67%. Comparing base (10b7af5) to head (c1a6386).
Report is 2 commits behind head on main.

Additional details and impacted files
@@          Coverage Diff          @@
##            main     #12   +/-   ##
=====================================
  Coverage   8.67%   8.67%           
=====================================
  Files          9       9           
  Lines       1314    1314           
=====================================
  Hits         114     114           
  Misses      1198    1198           
  Partials       2       2           
Flag Coverage Δ
unittests 8.67% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@evertoncolling evertoncolling merged commit f964020 into main Jul 3, 2025
14 checks passed
@evertoncolling evertoncolling deleted the fix-dependabot-alerts branch July 3, 2025 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant