Skip to content

deps: bump gin/cors/mysql/goquery/sqlbuilder (Go 1.25)#4

Merged
dhighwayman merged 1 commit into
masterfrom
deps/backend-security
May 30, 2026
Merged

deps: bump gin/cors/mysql/goquery/sqlbuilder (Go 1.25)#4
dhighwayman merged 1 commit into
masterfrom
deps/backend-security

Conversation

@dhighwayman

Copy link
Copy Markdown
Contributor

Security/maintenance batch (1 of the dependency-update series).

  • gin 1.6.3 → 1.12.0 (old gin has known CVEs), gin-contrib/cors 1.3.1 → 1.7.7
  • go-sql-driver/mysql 1.5.0 → 1.10.0, goquery 1.5.1 → 1.12.0, go-sqlbuilder 1.7.0 → 1.41.0
  • Latest gin/mysql/goquery need Go ≥ 1.24/1.25 → bump go 1.221.25 and builder image golang:1.22-alpinegolang:1.25-alpine

Verified locally: go build, go test ./..., and the production docker build are all green (incl. the gin-prometheus middleware against gin 1.12). Merging re-triggers the Cloud Run deploy via Artifact Registry.

🤖 Generated with Claude Code

Security/maintenance update of direct deps:
- gin 1.6.3 -> 1.12.0 (addresses old gin CVEs), gin-contrib/cors 1.3.1 -> 1.7.7
- go-sql-driver/mysql 1.5.0 -> 1.10.0, goquery 1.5.1 -> 1.12.0
- go-sqlbuilder 1.7.0 -> 1.41.0
The latest gin/mysql/goquery require Go >= 1.24/1.25, so bump go 1.22 -> 1.25
and the builder image golang:1.22-alpine -> golang:1.25-alpine.

Verified: go build, go test ./..., and the production docker build are green;
the gin-prometheus middleware still compiles against gin 1.12.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@dhighwayman dhighwayman merged commit 051b734 into master May 30, 2026
2 checks passed
@dhighwayman dhighwayman deleted the deps/backend-security branch May 30, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant