From 92cf3bafdae5061962271b673f2539e3c5aa24f4 Mon Sep 17 00:00:00 2001 From: Aric Camarata Date: Mon, 14 Sep 2026 15:35:12 -0400 Subject: [PATCH] fix(deps): patch pgx and chi in sdk/go MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit github.com/jackc/pgx/v5 5.9.0 -> 5.9.2 (GO low) github.com/go-chi/chi/v5 5.2.2 -> 5.2.4 (GO medium) Both flagged by Dependabot against sdk/go/go.mod with a published fix. The root module already carries newer versions of both; only the SDK module lagged. `go mod tidy` also pulls golang.org/x/text 0.31.0 and golang.org/x/sys 0.38.0 as a consequence of those two upgrades. Verified: `go build ./...` clean. `govulncheck ./...` reports no findings against either dependency — its remaining output on my machine is five Go standard library advisories fixed in go1.26.6, which is an artifact of a local go1.26.2 toolchain, not of this module. CI pins go-version 1.26.6 and its Go Vulnerability Check is green on main. --- sdk/go/go.mod | 4 ++-- sdk/go/go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/sdk/go/go.mod b/sdk/go/go.mod index 1b89cdb9a..c006a660b 100644 --- a/sdk/go/go.mod +++ b/sdk/go/go.mod @@ -3,8 +3,8 @@ module github.com/nself-org/cli/sdk/go/v2 go 1.25.0 require ( - github.com/go-chi/chi/v5 v5.2.2 - github.com/jackc/pgx/v5 v5.9.0 + github.com/go-chi/chi/v5 v5.2.4 + github.com/jackc/pgx/v5 v5.9.2 github.com/prometheus/client_golang v1.20.5 ) diff --git a/sdk/go/go.sum b/sdk/go/go.sum index da0817c4a..4634914d7 100644 --- a/sdk/go/go.sum +++ b/sdk/go/go.sum @@ -5,16 +5,16 @@ github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= -github.com/go-chi/chi/v5 v5.2.2 h1:CMwsvRVTbXVytCk1Wd72Zy1LAsAh9GxMmSNWLHCG618= -github.com/go-chi/chi/v5 v5.2.2/go.mod h1:L2yAIGWB3H+phAw1NxKwWM+7eUH/lU8pOMm5hHcoops= +github.com/go-chi/chi/v5 v5.2.4 h1:WtFKPHwlywe8Srng8j2BhOD9312j9cGUxG1SP4V2cR4= +github.com/go-chi/chi/v5 v5.2.4/go.mod h1:X7Gx4mteadT3eDOMTsXzmI4/rwUpOwBHLpAfupzFJP0= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM= github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo= github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= -github.com/jackc/pgx/v5 v5.9.0 h1:T/dI+2TvmI2H8s/KH1/lXIbz1CUFk3gn5oTjr0/mBsE= -github.com/jackc/pgx/v5 v5.9.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4= +github.com/jackc/pgx/v5 v5.9.2 h1:3ZhOzMWnR4yJ+RW1XImIPsD1aNSz4T4fyP7zlQb56hw= +github.com/jackc/pgx/v5 v5.9.2/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4= github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo= github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4= github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc=