Skip to content

Update vulnerable dependencies#40

Merged
louisgls merged 1 commit intomainfrom
fix/dependabot-vulnerabilities
Apr 22, 2026
Merged

Update vulnerable dependencies#40
louisgls merged 1 commit intomainfrom
fix/dependabot-vulnerabilities

Conversation

@louisgls
Copy link
Copy Markdown
Collaborator

Summary

  • update AWS SDK for Go v2 S3/EventStream dependencies to patched versions
  • update golang.org/x/crypto to v0.45.0
  • refresh go.sum with go mod tidy

Security

Fixes open Dependabot alerts:

Validation

  • go test ./...
  • CGO_ENABLED=0 GOOS=linux go build -o /tmp/s3proxy-vulnfix ./s3proxy/cmd
  • golangci-lint run

@louisgls louisgls merged commit 7ec3ce4 into main Apr 22, 2026
2 checks passed
@louisgls louisgls deleted the fix/dependabot-vulnerabilities branch April 22, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant