 naveen
|
192cee494f
|
mod+tools+Makefile:separate tools different module
Separated the tools to different go module to avoid having tools
dependencies on the main module.
|
2022-02-10 11:02:01 +01:00 |
|
|
Naveen
|
4de2ec1264
|
docs: sign your git commits [skip-ci]
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2014-May/005877.html
|
2022-01-11 14:08:18 +01:00 |
|
|
naveen
|
87a0e52464
|
multi: Removed deprecated interfacer linter
Removed the deprecated interfacer linter from being called for linting.
Also removed the `nolint:interfacer` within the code.
https://github.com/lightningnetwork/lnd/issues/5741
|
2022-01-11 14:08:18 +01:00 |
|
|
naveen
|
545e84f4ce
|
multi: formatting changes
|
2022-01-11 14:08:17 +01:00 |
|
|
naveen
|
b3ef3db0f2
|
multi: Remove GO111MODULE env variable in Makefile
The `GO111MODULE` variable is not required from go 1.16
https://go.dev/blog/go116-module-changes
|
2021-11-30 09:35:30 +01:00 |
|
|
naveen
|
06433d351e
|
Upgrade to go 1.16 for the left over packages
Upgraded the go to 1.16 for the rest of the packages.
|
2021-10-19 03:55:13 +00:00 |
|
|
naveen
|
844dbc08e7
|
mod:replace mongo driver to address CVE-2021-20329
* The mongo driver has CVE https://github.com/advisories/GHSA-f6mq-5m25-4r72
* The mongo driver is an indirect reference and cannot be directly
upgraded.
* https://deps.dev/advisory/OSV/GO-2021-0112?from=%2Fgo%2Fgithub.com%252Flightningnetwork%252Flnd
* The fix will replace the reference of the library with the fixed
version.
|
2021-10-01 13:48:47 +00:00 |
|
|
naveen
|
d5e3302265
|
mod : replace gogo/protobuf for GO-2021-0053
The gogo/protobuf has OSV GO-2021-0053
https://deps.dev/advisory/OSV/GO-2021-0053?from=%2Fgo%2Fgithub.com%252Flightningnetwork%252Flnd
This is used indirectly and has to be replaced in go.mod to avoid the
direct reference to that version.
The OSV has been addressed in v1.3.2
|
2021-10-01 13:07:52 +00:00 |
|
|
naveen
|
04f57c6f57
|
mod: Upgraded xz library to FIX the CVE-2021-29482
Included a replace directive to avoid using an high severity CVE
https://github.com/advisories/GHSA-25xm-hr59-7c27
This library is indirectly referenced and cannot be upgraded directly.
The https://github.com/fergusstrange/embedded-postgres/pull/42 was
merged to fix the CVE issue.
|
2021-09-29 15:16:26 +00:00 |
|
|
naveen
|
8b4bbfbf61
|
mod : Replace for OSV GO-2020-0017 JWT
The github.com/dgrijalva/jwt-go is no longer maintained
has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc
But it is being used by https://github.com/etcd-io/etcd/issues/13254
which `lnd` uses.
The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of
the same version which was 3.2.0 with the security fix.
|
2021-09-16 11:23:28 +00:00 |
|
|
naveen
|
ae6f771443
|
mod: bump miekg/dns to next version
The dns has https://deps.dev/go/github.com%2Fmiekg%2Fdns/v1.1.25 has
GO-2020-0012 https://storage.googleapis.com/go-vulndb/golang.org/x/crypto.json
Updated the dependency with the fix.
|
2021-09-15 23:11:04 +00:00 |
|