Skip to content

Conversation

@theFong
Copy link
Member

@theFong theFong commented Jan 12, 2026

Summary

  • Update golang.org/x/crypto to v0.46.0
  • Update golang.org/x/net to v0.48.0

These updates address high severity CVEs identified in the nSpect security scan.

Test plan

  • Verify go mod tidy completes successfully
  • Run unit tests
  • Verify application builds correctly

🤖 Generated with Claude Code

@theFong theFong requested a review from a team as a code owner January 12, 2026 04:18
Copy link
Contributor

@tylerfong tylerfong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

- Update Go from 1.22.6 to 1.24.0
- Update golang.org/x dependencies for security fixes
- Fix all non-constant format string vet errors required by Go 1.24
- Remove unnecessary loop variable copies (copyloopvar) for Go 1.22+
- Update golangci-lint from v1.57.2 to v2.0.2
- Migrate golangci-lint configuration to v2 format
- Update all CI workflow files to use Go 1.24.0
@theFong theFong force-pushed the fix/security-updates branch from 8379e4a to c0827b4 Compare January 28, 2026 06:04
@theFong theFong merged commit be07fe0 into main Jan 28, 2026
9 checks passed
@theFong theFong deleted the fix/security-updates branch January 28, 2026 06:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants