Dmitry Verkhoturov and GitHub
1f34984dab
Bump go-pkgz/rest to v1.24.0 and opt in to wildcard origins with credentials ( #2157 )
...
rest.CORS refuses "*" together with credentials since go-pkgz/rest#52 , so the
bump and the option have to land together: the option does not exist in v1.22.0
and the panic fires at construction, inside routes(), which makes it a startup
failure rather than a request-time one.
The wildcard stays. The comment widget is embedded on arbitrary third-party
sites, so the set of origins is not knowable, which is why the escape hatch was
asked for upstream instead of accepting the panic. What it costs is unchanged
and now written next to the call: any site a signed-in user visits can read
authenticated responses, so state-changing requests have to keep being protected
by something other than the origin, X-XSRF-Token today.
The example module is tidied in the same commit, as it reaches go-pkgz/rest
through the replace directive and its indirect graph would otherwise keep the
old pin and fail the readonly module check in CI.
The bump also carries testify to v1.12.0, which drops go-spew and go-difflib
from the module graph.
2026-08-19 00:33:13 -05:00
638fa63e81
Bump the go-modules-updates group in /backend with 7 updates ( #1995 )
...
* Bump the go-modules-updates group in /backend with 7 updates
Bumps the go-modules-updates group in /backend with 7 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma ) | `2.21.1` | `2.23.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi ) | `5.2.3` | `5.2.4` |
| [github.com/go-pkgz/rest](https://github.com/go-pkgz/rest ) | `1.20.6` | `1.21.0` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ) | `5.3.0` | `5.3.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto ) | `0.46.0` | `0.47.0` |
| [golang.org/x/image](https://github.com/golang/image ) | `0.34.0` | `0.35.0` |
| [golang.org/x/net](https://github.com/golang/net ) | `0.48.0` | `0.49.0` |
Updates `github.com/alecthomas/chroma/v2` from 2.21.1 to 2.23.1
- [Release notes](https://github.com/alecthomas/chroma/releases )
- [Commits](https://github.com/alecthomas/chroma/compare/v2.21.1...v2.23.1 )
Updates `github.com/go-chi/chi/v5` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/go-chi/chi/releases )
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md )
- [Commits](https://github.com/go-chi/chi/compare/v5.2.3...v5.2.4 )
Updates `github.com/go-pkgz/rest` from 1.20.6 to 1.21.0
- [Release notes](https://github.com/go-pkgz/rest/releases )
- [Commits](https://github.com/go-pkgz/rest/compare/v1.20.6...v1.21.0 )
Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 )
Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0
- [Commits](https://github.com/golang/crypto/compare/v0.46.0...v0.47.0 )
Updates `golang.org/x/image` from 0.34.0 to 0.35.0
- [Commits](https://github.com/golang/image/compare/v0.34.0...v0.35.0 )
Updates `golang.org/x/net` from 0.48.0 to 0.49.0
- [Commits](https://github.com/golang/net/compare/v0.48.0...v0.49.0 )
---
updated-dependencies:
- dependency-name: github.com/alecthomas/chroma/v2
dependency-version: 2.23.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/go-chi/chi/v5
dependency-version: 5.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/rest
dependency-version: 1.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-version: 5.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-modules-updates
- dependency-name: golang.org/x/crypto
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: golang.org/x/image
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
- dependency-name: golang.org/x/net
dependency-version: 0.49.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-modules-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
* Run go mod tidy in examples directory
Co-authored-by: paskal <712534+paskal@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: paskal <712534+paskal@users.noreply.github.com >
2026-02-14 19:48:24 -06:00
Dmitry Verkhoturov and Umputun
3210de8f7b
update go modules
2024-02-20 12:23:16 -06:00
Dmitry Verkhoturov and Umputun
cebe929118
bump go modules, enable LoginAuth option for email
...
That option is needed for outlook.com and Office 365, resolves #1472 .
2022-10-03 03:26:34 -05:00
Umputun
f4856c86d7
update deps
2022-04-15 12:50:05 -05:00
Umputun and GitHub
d5246c9689
Deps bump ( #956 )
...
* remove redundant sprintf
* bump many deps
* missing vendors
2021-04-27 00:30:38 -05:00
Umputun and GitHub
0b13e8a8d2
update backend deps from go-pkgz ( #935 )
2021-03-29 16:24:59 -05:00
Dmitry Verkhoturov and Umputun
dba77d403d
bump go-pkgz modules, bbolt new url
2020-04-12 16:09:01 -05:00
Umputun
8c8f13fd73
adopt for rest errors and revendor go-pkgz
2019-01-13 23:27:15 -06:00
Umputun
440c7abfed
switch local rest middlewares to go-pkgz/rest
2018-12-24 15:34:24 -06:00
Dmitry VerkhoturovandGitHub
