fix(deps): upgrade golang.org/x/crypto to fix CVE vulnerabilities

- bump golang.org/x/crypto to v0.45.0 (fixes CVE-2024-45337 CRITICAL,
  CVE-2025-22869 HIGH, CVE-2025-47914 MEDIUM, CVE-2025-58181 MEDIUM)
- bump golang.org/x/sys to v0.38.0
This commit is contained in:
Bo-Yi Wu
2026-04-16 12:13:16 +08:00
parent 7d363fb2b0
commit a4fc564fc9
2 changed files with 9 additions and 9 deletions
+3 -3
View File
@@ -1,6 +1,6 @@
module github.com/appleboy/drone-scp
go 1.23.8
go 1.24.0
require (
github.com/appleboy/com v1.1.0
@@ -10,7 +10,7 @@ require (
github.com/stretchr/testify v1.8.4
github.com/urfave/cli/v2 v2.27.7
github.com/yassinebenaid/godump v0.11.1
golang.org/x/crypto v0.41.0
golang.org/x/crypto v0.45.0
)
require (
@@ -23,6 +23,6 @@ require (
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/russross/blackfriday/v2 v2.1.0 // indirect
github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342 // indirect
golang.org/x/sys v0.35.0 // indirect
golang.org/x/sys v0.38.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)