Skip to content

fix: update example dependencies to resolve security vulnerabilities - #4

Merged
peterborodatyy merged 1 commit into
mainfrom
fix/update-example-deps
Apr 12, 2026
Merged

peterborodatyy merged 1 commit into
mainfrom
fix/update-example-deps

Conversation

@peterborodatyy

@peterborodatyy peterborodatyy commented Apr 12, 2026

Copy link
Copy Markdown
Contributor
  • Update golang.org/x/crypto to v0.50.0 and golang.org/x/net to v0.53.0 in gin/echo examples
  • Update Fiber v2 transitive deps (fasthttp v1.70.0) — already on latest v2.52.12
  • chi v5.2.5 already patched; prometheus client updated to v1.23.2
  • Add examples/prometheus/prometheus binary to .gitignore

Update transitive deps across all example modules:
- golang.org/x/crypto v0.50.0 (fixes auth bypass, DoS, SSH issues)
- golang.org/x/net v0.53.0 (fixes XSS, proxy bypass)
- Fiber transitive deps (fasthttp v1.70.0)
- Prometheus client v1.23.2
- Add examples/prometheus/prometheus binary to .gitignore

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@peterborodatyy
peterborodatyy force-pushed the fix/update-example-deps branch from 0e2c7fb to d13a132 Compare April 12, 2026 16:44
@peterborodatyy peterborodatyy changed the title Fix/update example deps fix: update example dependencies to resolve security vulnerabilities Apr 12, 2026
@peterborodatyy
peterborodatyy merged commit ffa33b6 into main Apr 12, 2026
8 checks passed
@peterborodatyy
peterborodatyy deleted the fix/update-example-deps branch April 12, 2026 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant