Skip to content

fix(nancy): remediate findings on main #999

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
heraldbot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(nancy): remediate findings on main #999

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 12 additions & 11 deletions .nancy-ignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,19 +1,20 @@
CVE-2026-26958 until=2026-09-27 # filippo.io/edwards25519@v1.1.0
CVE-2026-10722 until=2026-09-27 # github.com/cilium/ebpf@v0.9.1
CVE-2026-26958 until=2026-11-01 # filippo.io/edwards25519@v1.1.0
CVE-2025-47290 until=2026-10-08 # github.com/containerd/containerd@v1.7.33
CVE-2025-47291 until=2026-10-08 # github.com/containerd/containerd@v1.7.33
CVE-2026-63209 until=2026-09-27 # github.com/klauspost/compress@v1.18.4
CVE-2024-0406 until=2026-09-27 # github.com/mholt/archiver/v3@v3.5.1
CVE-2025-3445 until=2026-09-27 # github.com/mholt/archiver/v3@v3.5.1
CVE-2026-56864 until=2026-09-27 # golang.org/x/mod@v0.37.0
CVE-2026-56865 until=2026-09-27 # golang.org/x/mod@v0.37.0
CVE-2026-63308 until=2026-09-27 # helm.sh/helm/v3@v3.21.4
CVE-2026-48978 until=2026-09-27 # oras.land/oras-go@v1.2.7
CVE-2026-56854 until=2026-09-30 # golang.org/x/crypto@v0.54.0
CVE-2026-37236 until=2026-10-01 # github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0
CVE-2026-81871 until=2026-10-03 # go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.19.0
CVE-2026-81870 until=2026-10-03 # go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0
CVE-2026-81872 until=2026-10-03 # go.opentelemetry.io/otel/sdk/log@v0.19.0
CVE-2026-56855 until=2026-10-08 # golang.org/x/crypto@v0.55.0
CVE-2026-53495 until=2026-10-08 # github.com/containerd/containerd@v1.7.33
CVE-2026-78662 until=2026-10-08 # golang.org/x/crypto@v0.55.0
CVE-2026-10722 until=2026-11-01 # github.com/cilium/ebpf@v0.9.1
CVE-2026-85747 until=2026-11-01 # github.com/distribution/distribution/v3@v3.1.1
CVE-2026-37236 until=2026-11-01 # github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0
CVE-2026-63209 until=2026-11-01 # github.com/klauspost/compress@v1.18.4
CVE-2025-3445 until=2026-11-01 # github.com/mholt/archiver/v3@v3.5.1
CVE-2024-0406 until=2026-11-01 # github.com/mholt/archiver/v3@v3.5.1
CVE-2026-56864 until=2026-11-01 # golang.org/x/mod@v0.38.0
CVE-2026-56865 until=2026-11-01 # golang.org/x/mod@v0.38.0
CVE-2026-63308 until=2026-11-01 # helm.sh/helm/v3@v3.21.4
CVE-2026-85732 until=2026-11-01 # oras.land/oras-go@v1.2.7
CVE-2026-48978 until=2026-11-01 # oras.land/oras-go@v1.2.7
2 changes: 2 additions & 0 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,3 +184,5 @@ replace github.com/yuin/goldmark v1.2.1 => github.com/yuin/goldmark v1.8.5
replace oras.land/oras-go/v2 v2.6.1 => oras.land/oras-go/v2 v2.6.2

replace google.golang.org/grpc v1.82.1 => google.golang.org/grpc v1.83.2

replace github.com/containerd/containerd v1.7.33 => github.com/containerd/containerd v1.7.36
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,8 +64,8 @@ github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg
github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
github.com/containerd/cgroups v1.1.0 h1:v8rEWFl6EoqHB+swVNjVoCJE8o3jX7e8nqBGPLaDFBM=
github.com/containerd/cgroups v1.1.0/go.mod h1:6ppBcbh/NOOUU+dMKrykgaBnK9lCIBxHqJDGwsa1mIw=
github.com/containerd/containerd v1.7.33 h1:iAkYGC/ifR/V+0eR4iXWHNGYUF0DF2PmGV5iz4Irj5M=
github.com/containerd/containerd v1.7.33/go.mod h1:gSbSCVjPCdkfJCjyrzz7aRC+xFlqVbatNpfHfVCYGUM=
github.com/containerd/containerd v1.7.36 h1:HyMsOG5kmp1LQsGzqwI6Ts06T4VpYZbszfDZYB0bW5w=
github.com/containerd/containerd v1.7.36/go.mod h1:ozI//0TomTCLPhQREnx0IXDIQMg+Fk7yTtg9fNvU8EQ=
github.com/containerd/continuity v0.4.4 h1:/fNVfTJ7wIl/YPMHjf+5H32uFhl63JucB34PlCpMKII=
github.com/containerd/continuity v0.4.4/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
github.com/containerd/errdefs v0.3.0 h1:FSZgGOeK4yuT/+DnF07/Olde/q4KBoMsaamhXxIMDp4=
Expand Down
Loading