Dmitry Verkhoturov
07c7926453
Update all Go modules in backend/ and backend/_example/memory_store/ to their latest versions (chroma 2.27, go-redis 9.21, bbolt 1.5, slack 0.27, golang.org/x/* and others); re-tidy and re-vendor, keep the example module in sync. Hold github.com/go-chi/chi/v5 at v5.2.5: v5.3.0 deprecates middleware.RealIP (IP-spoofing advisories). Switching off RealIP changes how the client IP is derived for rate limiting and votes, which is a security decision better made on its own rather than inside a dependency bump. go test -race, go vet, golangci-lint and govulncheck all clean on both modules.
41 lines
1.4 KiB
AMPL
41 lines
1.4 KiB
AMPL
module github.com/umputun/remark42/memory_store
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
github.com/go-pkgz/jrpc v0.4.0
|
|
github.com/go-pkgz/lgr v0.12.3
|
|
github.com/jessevdk/go-flags v1.6.1
|
|
github.com/stretchr/testify v1.11.1
|
|
github.com/umputun/remark42/backend v1.1000.0
|
|
)
|
|
|
|
require (
|
|
github.com/Depado/bfchroma/v2 v2.0.0 // indirect
|
|
github.com/PuerkitoBio/goquery v1.12.0 // indirect
|
|
github.com/alecthomas/chroma/v2 v2.27.0 // indirect
|
|
github.com/andybalholm/cascadia v1.3.4 // indirect
|
|
github.com/aymerick/douceur v0.2.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dlclark/regexp2/v2 v2.2.2 // indirect
|
|
github.com/go-pkgz/rest v1.21.0 // indirect
|
|
github.com/go-pkgz/routegroup v1.6.0 // indirect
|
|
github.com/gorilla/css v1.0.1 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/microcosm-cc/bluemonday v1.0.27 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/rogpeppe/go-internal v1.14.1 // indirect
|
|
github.com/rs/xid v1.6.0 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
go.etcd.io/bbolt v1.5.0 // indirect
|
|
golang.org/x/crypto v0.53.0 // indirect
|
|
golang.org/x/image v0.43.0 // indirect
|
|
golang.org/x/net v0.56.0 // indirect
|
|
golang.org/x/sys v0.46.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|
|
|
|
replace github.com/umputun/remark42/backend v1.1000.0 => ../../
|