dependabot[bot] and Umputun
4aaba0fb61
chore(deps): bump github.com/stretchr/testify
...
Bumps the go-modules-updates group in /backend with 1 update: [github.com/stretchr/testify](https://github.com/stretchr/testify ).
Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-21 18:44:10 -05:00
Dmitry Verkhoturov and GitHub
1f34984dab
Bump go-pkgz/rest to v1.24.0 and opt in to wildcard origins with credentials ( #2157 )
...
rest.CORS refuses "*" together with credentials since go-pkgz/rest#52 , so the
bump and the option have to land together: the option does not exist in v1.22.0
and the panic fires at construction, inside routes(), which makes it a startup
failure rather than a request-time one.
The wildcard stays. The comment widget is embedded on arbitrary third-party
sites, so the set of origins is not knowable, which is why the escape hatch was
asked for upstream instead of accepting the panic. What it costs is unchanged
and now written next to the call: any site a signed-in user visits can read
authenticated responses, so state-changing requests have to keep being protected
by something other than the origin, X-XSRF-Token today.
The example module is tidied in the same commit, as it reaches go-pkgz/rest
through the replace directive and its indirect graph would otherwise keep the
old pin and fail the readonly module check in CI.
The bump also carries testify to v1.12.0, which drops go-spew and go-difflib
from the module graph.
2026-08-19 00:33:13 -05:00
dependabot[bot] and Umputun
6d8a0c783b
Bump the go-modules-updates group across 1 directory with 11 updates
...
Bumps the go-modules-updates group with 11 updates in the /backend directory:
| Package | From | To |
| --- | --- | --- |
| [github.com/PuerkitoBio/goquery](https://github.com/PuerkitoBio/goquery ) | `1.10.2` | `1.11.0` |
| [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma ) | `2.15.0` | `2.20.0` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi ) | `5.2.1` | `5.2.3` |
| [github.com/go-chi/cors](https://github.com/go-chi/cors ) | `1.2.1` | `1.2.2` |
| [github.com/go-pkgz/jrpc](https://github.com/go-pkgz/jrpc ) | `0.3.1` | `0.4.0` |
| [github.com/go-pkgz/lgr](https://github.com/go-pkgz/lgr ) | `0.12.0` | `0.12.1` |
| [github.com/go-pkgz/rest](https://github.com/go-pkgz/rest ) | `1.20.3` | `1.20.4` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ) | `5.2.2` | `5.3.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify ) | `1.10.0` | `1.11.1` |
| [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) | `1.4.0` | `1.4.3` |
| [golang.org/x/image](https://github.com/golang/image ) | `0.26.0` | `0.33.0` |
Updates `github.com/PuerkitoBio/goquery` from 1.10.2 to 1.11.0
- [Release notes](https://github.com/PuerkitoBio/goquery/releases )
- [Commits](https://github.com/PuerkitoBio/goquery/compare/v1.10.2...v1.11.0 )
Updates `github.com/alecthomas/chroma/v2` from 2.15.0 to 2.20.0
- [Release notes](https://github.com/alecthomas/chroma/releases )
- [Commits](https://github.com/alecthomas/chroma/compare/v2.15.0...v2.20.0 )
Updates `github.com/go-chi/chi/v5` from 5.2.1 to 5.2.3
- [Release notes](https://github.com/go-chi/chi/releases )
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md )
- [Commits](https://github.com/go-chi/chi/compare/v5.2.1...v5.2.3 )
Updates `github.com/go-chi/cors` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/go-chi/cors/releases )
- [Commits](https://github.com/go-chi/cors/compare/v1.2.1...v1.2.2 )
Updates `github.com/go-pkgz/jrpc` from 0.3.1 to 0.4.0
- [Release notes](https://github.com/go-pkgz/jrpc/releases )
- [Commits](https://github.com/go-pkgz/jrpc/compare/v0.3.1...v0.4.0 )
Updates `github.com/go-pkgz/lgr` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/go-pkgz/lgr/releases )
- [Commits](https://github.com/go-pkgz/lgr/compare/v0.12.0...v0.12.1 )
Updates `github.com/go-pkgz/rest` from 1.20.3 to 1.20.4
- [Release notes](https://github.com/go-pkgz/rest/releases )
- [Commits](https://github.com/go-pkgz/rest/compare/v1.20.3...v1.20.4 )
Updates `github.com/golang-jwt/jwt/v5` from 5.2.2 to 5.3.0
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.2...v5.3.0 )
Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.1 )
Updates `go.etcd.io/bbolt` from 1.4.0 to 1.4.3
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.4.0...v1.4.3 )
Updates `golang.org/x/image` from 0.26.0 to 0.33.0
- [Commits](https://github.com/golang/image/compare/v0.26.0...v0.33.0 )
---
updated-dependencies:
- dependency-name: github.com/PuerkitoBio/goquery
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/alecthomas/chroma/v2
dependency-version: 2.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/go-chi/chi/v5
dependency-version: 5.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: github.com/go-chi/cors
dependency-version: 1.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/jrpc
dependency-version: 0.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/lgr
dependency-version: 0.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/rest
dependency-version: 1.20.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/stretchr/testify
dependency-version: 1.11.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: go.etcd.io/bbolt
dependency-version: 1.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: golang.org/x/image
dependency-version: 0.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-03 18:17:46 -06:00
dependabot[bot] and Dmitry Verkhoturov
0aadf0ba86
Bump the go-modules-updates group in /backend with 3 updates
...
Bumps the go-modules-updates group in /backend with 3 updates: [github.com/stretchr/testify](https://github.com/stretchr/testify ), [golang.org/x/crypto](https://github.com/golang/crypto ) and [golang.org/x/net](https://github.com/golang/net ).
Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0 )
Updates `golang.org/x/crypto` from 0.27.0 to 0.29.0
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.29.0 )
Updates `golang.org/x/net` from 0.29.0 to 0.31.0
- [Commits](https://github.com/golang/net/compare/v0.29.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-02 04:24:48 +00:00
Dmitry Verkhoturov and Umputun
4bb0017060
update go modules
2024-04-10 19:33:20 -05:00
Umputun
e30d4da455
update auth lib to master #1660
...
adopt tests for the mandatory provider check
fix leftover test for the server
2023-08-20 19:37:39 -05:00
Dmitry Verkhoturov and Umputun
1b90604b2d
update go modules, fix Apple auth redirect
...
Previously the redirect after successful authentication didn't work.
2023-04-02 03:47:35 -05:00
Dmitry Verkhoturov and Umputun
26476db95d
update go-pkgz/rest, stretchr/testify, three stdlib modules
2022-07-13 12:40:30 -05:00
Umputun and GitHub
89dc8ac6dd
Go 1.17 ( #1306 )
...
* change go mod to 1.17
* update go-pgkz and transitive deps
* bump examples to go-1.17
* bump deps
2022-04-05 11:50:45 -05:00
Umputun and GitHub
d5246c9689
Deps bump ( #956 )
...
* remove redundant sprintf
* bump many deps
* missing vendors
2021-04-27 00:30:38 -05:00
Umputun
b15f07b5f7
update auth module
2021-01-03 02:22:23 -06:00
Dmitry Verkhoturov and Umputun
d6c7e151a0
bump modules
2020-04-13 12:03:26 -05:00
Umputun
c5b927904f
extend User struct with site_id/aud
...
updated to 0.8.0 of auth pkgs supporting user-space aud
2019-08-23 03:12:08 -05:00
Umputun
1561dc2fda
switch to go mod
2019-03-09 02:02:55 -06:00
Umputun and GitHub
7aee7add08
Feature/backend ( #101 )
...
* move backend code #99
* adjust drone build for backend subdir
* move .rest to backend
2018-06-23 12:31:19 -05:00