mirror/lnd
1
0 Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
20,399 Commits 1 Branch 0 Tags
master
Commit Graph
46 Commits
Author SHA1 Message Date
Boris Nagaev 6ee8e2a84d multi: update mapstructure/v2 
go-viper's mapstructure may leak sensitive information in logs when processing
malformed data. Updating to the version where the bug is fixed.
 2025-10-21 15:22:45 -03:00
ziggie 1dda376404 mod: update etcd/bbolt lib to newest version 
Version v1.4.3 has some important bugfixes. We bump both version
in the same go so we do not need to tag the kvdb package and the
latest version of will be used.
 2025-09-16 23:08:27 +02:00
Boris Nagaev d02520d2b9 go.mod: bump mapstructure/v2 to v2.3.0 2025-07-25 12:21:18 -03:00
Boris Nagaev 3ff11e0765 go.mod: bump runc to v1.1.14 2025-07-25 12:21:13 -03:00
Boris Nagaev 9e58a644aa go.mod: bump google.golang.org/protobuf to 1.33.0 
Updated github.com/golang/protobuf to v1.5.4 to be compatible with
google.golang.org/protobuf.

Updated the pinned version in pinned_dep CI job.
 2025-07-25 12:20:24 -03:00
Boris Nagaev fb48ffe2b6 multi: update btcd to v0.24.2 2025-07-16 01:19:58 -03:00
Boris Nagaev ea7d9fcc14 multi: update pgx/v5 to v5.7.4, pgx/v4 to v4.18.3 2025-07-16 01:19:58 -03:00
Boris Nagaev dc6ce69bad multi: update x/net to v0.39.0 2025-07-16 01:19:58 -03:00
Boris Nagaev eb5ec87498 multi: update docker Go package to v28.1.1 2025-07-16 01:19:55 -03:00
Boris Nagaev 2bf67711dd multi: update golang-jwt to 4.5.2 2025-07-16 01:18:22 -03:00
Boris Nagaev 4ec9708acc multi: update x/crypto to v0.37.0 2025-07-16 01:18:22 -03:00
ziggie 73251952d1 mod: update btclog library 2025-06-03 13:06:28 +02:00
ziggie 490347b056 multi: update walletdb package 2025-04-09 18:47:53 +02:00
Andras Banki-Horvath 377397e8bc kvdb: bump etcd libs to v3.5.12 2025-04-01 12:40:31 +02:00
yyforyongyu 785cef2a96 gomod: remove replace of sqldb and kvdb 2024-12-19 19:02:46 +08:00
Alex Akselrod 780c271b80 sqldb: improve serialization error handling 2024-12-12 10:40:37 -08:00
Elle Mouton a6e68cb6b8 kvdb: update btclog dep 2024-10-26 14:16:31 +02:00
Olaoluwa Osuntokun 06b3588512 kvdb: update to latest walletdb version 2024-09-12 16:41:43 -07:00
Olaoluwa Osuntokun f8962af444 kvdb: update bbolt to v1.3.11 2024-09-11 10:45:12 -07:00
Olaoluwa Osuntokun 7302051f44 build: update to sqldb v1.0.2 
In this commit, we update the project and relevant sub-modules to sqldb
v1.0.2. The next step is to tag a new version of kvdb, then update the
main module to use that.
 2024-04-26 15:31:14 -07:00
Olaoluwa Osuntokun eb605a02fd sqldb+kvdb: update to sqlite v1.29.8 
Updates to SQLite 3.45.3: https://www.sqlite.org/releaselog/3_45_3.html.

May also address https://github.com/lightningnetwork/lnd/issues/8666.
 2024-04-26 12:26:59 -07:00
Olaoluwa Osuntokun 06e4ffb3f3 kvdb: bump to sqldb/v1.0.1 
Post merge module clean up after
https://github.com/lightningnetwork/lnd/pull/8611.
 2024-04-12 15:16:26 -07:00
Andras Banki-Horvath 43f4b14c28 kvdb+sqldb: use the same tx retry helper 2024-04-11 15:04:02 +02:00
Andras Banki-Horvath 524fa66abf kvdb: bump embedded postgres to v1.25.0 2024-01-24 21:38:53 +01:00
dependabot[bot] effa5cf066 build(deps): bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /kvdb 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.53.0 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.53.0...v1.56.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-25 22:28:42 +00:00
dependabot[bot] be9fb28ac1 build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /kvdb 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.10.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.10.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-16 10:45:31 +00:00
yyforyongyu 8813bc7ba8 kvdb/sqlbase: fix build errors 
We copy the `sqldb/sqlerrors.go` into `kvdb/sqlbase` to avoid import
cycles.
 2023-09-06 02:48:12 +08:00
positiveblue 09d21345e1 multi: bump Go version 
Bump all build go versions to v1.21.0
Bump the minimum build package version to v1.19.0

Debian "buster" is not longer supported. Security updates have been
discontinued since June 30th 2022. We will build using the latest
version, "bookworm".
 2023-09-05 10:11:42 -07:00
yyforyongyu 68e6cd5c2e gomod: run go work sync to sync modules 
This commit is the result of running `go work sync` and `go mod tidy`
that syncs module versions for all submodules.
 2023-09-05 07:27:20 +08:00
yyforyongyu 036f2a0f03 kvdb: fix version conflict in github.com/ulikunitz/xz 
Fix the following conflict,
```
go: conflicting replacements for github.com/ulikunitz/xz:
	github.com/ulikunitz/xz@v0.5.11
	github.com/ulikunitz/xz@v0.5.8
```
 2023-09-05 05:48:36 +08:00
dependabot[bot] b9b34a086f build(deps): bump google.golang.org/grpc from 1.41.0 to 1.53.0 in /kvdb 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.41.0 to 1.53.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.41.0...v1.53.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-05 21:12:10 +00:00
Hampus Sjöberg 3d69ed3d4c kvdb: Update bbolt to 1.3.7 in order to address mmap issues 2023-06-29 17:54:43 +02:00
dependabot[bot] ded9fb87d2 build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 in /kvdb 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.4.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.4.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-17 16:03:17 +00:00
Joost Jager 1725e5bcbe kvdb: bump etcd to v3.5.7 2023-01-24 13:52:20 +01:00
Elle Mouton 74b9c9ce9a kvdb: add sqlite 2023-01-23 09:14:08 +02:00
Elle Mouton 72dbc3dbb4 kvdb: bump go version to 1.18 
Bump the go version to go1.18 so that we can get rid of the '// +build'
comments in the upcoming commits where some of the '//go:build'
comments will become too complex to write as '// +build' comments.
 2023-01-23 09:05:10 +02:00
naveen 06433d351e Upgrade to go 1.16 for the left over packages 
Upgraded the go to 1.16 for the rest of the packages.
 2021-10-19 03:55:13 +00:00
naveen d5e3302265 mod : replace gogo/protobuf for GO-2021-0053 
The gogo/protobuf has OSV GO-2021-0053
https://deps.dev/advisory/OSV/GO-2021-0053?from=%2Fgo%2Fgithub.com%252Flightningnetwork%252Flnd

This is used indirectly and has to be replaced in go.mod to avoid the
direct reference to that version.

The OSV has been addressed in v1.3.2
 2021-10-01 13:07:52 +00:00
naveen 04f57c6f57 mod: Upgraded xz library to FIX the CVE-2021-29482 
Included a replace directive to avoid using an high severity CVE
https://github.com/advisories/GHSA-25xm-hr59-7c27

This library is indirectly referenced and cannot be upgraded directly.

The https://github.com/fergusstrange/embedded-postgres/pull/42 was
merged to fix the CVE issue.
 2021-09-29 15:16:26 +00:00
Joost Jager 3eb80cac97 kvdb: add postgres 2021-09-21 10:44:18 +02:00
naveen 8b4bbfbf61 mod : Replace for OSV GO-2020-0017 JWT 
The github.com/dgrijalva/jwt-go is no longer maintained
has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc

But it is being used by https://github.com/etcd-io/etcd/issues/13254
which `lnd` uses.

The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of
the same version which was 3.2.0 with the security fix.
 2021-09-16 11:23:28 +00:00
Oliver Gugger 482f76a0f4 mod+kvdb+channeldb: use btcwallet new DB interface 
Depends on btcsuite/btcwallet#757.
Pulls in the updated version of btcwallet and walletdb that have the DB
interface enhanced by their own View() and Update() methods with the
reset callback/closure supported out of the box. That way the global
package-level View() and Update() functions now become pure redirects.
 2021-08-04 14:55:55 +02:00
Oliver Gugger 76e1223bf2 mod+kvdb: update etcd to v3.5.0 2021-07-27 13:09:59 +02:00
Joost Jager e9cba1a526 kvdb/test: add bolt test 2021-07-12 11:31:11 +02:00
Andras Banki-Horvath fc139d9bb8 kvdb: add ForEachBucket implementation 2021-05-13 10:35:35 +02:00
Andras Banki-Horvath 3c6f036bee kvdb: make lnd/kvdb a submodule 2021-05-07 14:18:57 +02:00