Dmitry Verkhoturov
07c7926453
Update all Go modules in backend/ and backend/_example/memory_store/ to their latest versions (chroma 2.27, go-redis 9.21, bbolt 1.5, slack 0.27, golang.org/x/* and others); re-tidy and re-vendor, keep the example module in sync. Hold github.com/go-chi/chi/v5 at v5.2.5: v5.3.0 deprecates middleware.RealIP (IP-spoofing advisories). Switching off RealIP changes how the client IP is derived for rate limiting and votes, which is a security decision better made on its own rather than inside a dependency bump. go test -race, go vet, golangci-lint and govulncheck all clean on both modules.
74 lines
2.7 KiB
AMPL
74 lines
2.7 KiB
AMPL
module github.com/umputun/remark42/backend
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
github.com/Depado/bfchroma/v2 v2.0.0
|
|
github.com/PuerkitoBio/goquery v1.12.0
|
|
github.com/alecthomas/chroma/v2 v2.27.0
|
|
github.com/didip/tollbooth/v8 v8.0.1
|
|
github.com/go-chi/chi/v5 v5.2.5
|
|
github.com/go-chi/cors v1.2.2
|
|
github.com/go-pkgz/auth/v2 v2.1.4
|
|
github.com/go-pkgz/jrpc v0.4.0
|
|
github.com/go-pkgz/lcw/v2 v2.0.0
|
|
github.com/go-pkgz/lgr v0.12.3
|
|
github.com/go-pkgz/notify v1.3.0
|
|
github.com/go-pkgz/repeater/v2 v2.2.0
|
|
github.com/go-pkgz/rest v1.21.0
|
|
github.com/go-pkgz/syncs v1.3.2
|
|
github.com/golang-jwt/jwt/v5 v5.3.1
|
|
github.com/google/uuid v1.6.0
|
|
github.com/gorilla/feeds v1.2.0
|
|
github.com/hashicorp/go-multierror v1.1.1
|
|
github.com/jessevdk/go-flags v1.6.1
|
|
github.com/kyokomi/emoji/v2 v2.2.13
|
|
github.com/microcosm-cc/bluemonday v1.0.27
|
|
github.com/rs/xid v1.6.0
|
|
github.com/russross/blackfriday/v2 v2.1.0
|
|
github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e
|
|
github.com/stretchr/testify v1.11.1
|
|
go.etcd.io/bbolt v1.5.0
|
|
go.uber.org/goleak v1.3.0
|
|
golang.org/x/crypto v0.53.0
|
|
golang.org/x/image v0.43.0
|
|
golang.org/x/net v0.56.0
|
|
golang.org/x/oauth2 v0.36.0
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go/compute/metadata v0.9.0 // indirect
|
|
github.com/andybalholm/cascadia v1.3.4 // indirect
|
|
github.com/aymerick/douceur v0.2.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dghubble/oauth1 v0.7.3 // indirect
|
|
github.com/dlclark/regexp2/v2 v2.2.2 // indirect
|
|
github.com/go-oauth2/oauth2/v4 v4.5.4 // indirect
|
|
github.com/go-pkgz/email v0.6.0 // indirect
|
|
github.com/go-pkgz/expirable-cache/v3 v3.1.0 // indirect
|
|
github.com/go-pkgz/repeater v1.2.0 // indirect
|
|
github.com/go-pkgz/routegroup v1.6.0 // indirect
|
|
github.com/golang/snappy v1.0.0 // indirect
|
|
github.com/gorilla/css v1.0.1 // indirect
|
|
github.com/gorilla/websocket v1.5.3 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
|
|
github.com/klauspost/compress v1.18.7 // indirect
|
|
github.com/montanaflynn/stats v0.9.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/redis/go-redis/v9 v9.21.0 // indirect
|
|
github.com/rrivera/identicon v0.0.0-20240116195454-d5ba35832c0d // indirect
|
|
github.com/slack-go/slack v0.27.0 // indirect
|
|
github.com/xdg-go/pbkdf2 v1.0.0 // indirect
|
|
github.com/xdg-go/scram v1.2.0 // indirect
|
|
github.com/xdg-go/stringprep v1.0.4 // indirect
|
|
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
|
|
go.mongodb.org/mongo-driver v1.17.9 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
golang.org/x/sync v0.21.0 // indirect
|
|
golang.org/x/sys v0.46.0 // indirect
|
|
golang.org/x/text v0.38.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|