Skip to content

fixes: fix GHSA-fv92-fjc5-jj9h#735

Merged
mattisonchao merged 1 commit intomainfrom
fix.cve.15
Jul 4, 2025
Merged

fixes: fix GHSA-fv92-fjc5-jj9h#735
mattisonchao merged 1 commit intomainfrom
fix.cve.15

Conversation

@mattisonchao
Copy link
Copy Markdown
Member

Motivation

Upgraded dependencies go-viper to fix the issue https://github.com/oxia-db/oxia/security/code-scanning/15

@mattisonchao mattisonchao self-assigned this Jul 3, 2025
@mattisonchao mattisonchao requested a review from Copilot July 3, 2025 16:04
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Upgrades the github.com/go-viper/mapstructure/v2 dependency from v2.2.1 to v2.3.0 to address the GHSA-fv92-fjc5-jj9h security advisory.

  • Bumped mapstructure module version in go.mod.
Comments suppressed due to low confidence (1)

go.mod:84

  • After bumping the dependency version, please run go mod tidy to update go.sum and ensure module checksums stay in sync.
	github.com/go-viper/mapstructure/v2 v2.3.0 // indirect

@mattisonchao mattisonchao merged commit ab7f112 into main Jul 4, 2025
9 of 11 checks passed
@mattisonchao mattisonchao deleted the fix.cve.15 branch July 4, 2025 06:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants