ghorg

mirror of https://github.com/gabrie30/ghorg.git synced 2026-01-21 16:21:43 +01:00

History

fix: update vulnerable dependencies to address security issues (#598 )

Updates two dependencies with known security vulnerabilities:

1. github.com/gomarkdown/markdown
   - Updated from v0.0.0-20191123064959-2c17d62f5098 (Nov 2019)
   - Updated to v0.0.0-20250810172220-2e2c11897d1a (Aug 2025)   - Fixes 2 HIGH severity vulnerabilities reported by OSV scanner2. github.com/disintegration/imaging   - Updated from v1.6.2   - Updated to v1.6.3-0.20201218193011-d40f48ce0f09 (master branch)
   - Fixes 1 MEDIUM severity vulnerability
   - Note: Using master branch as no new tagged release available since 2019

Both packages are indirect dependencies pulled in through
github.com/MichaelMure/go-term-markdown.

Changes:
- go get github.com/gomarkdown/markdown@latest
- go get github.com/disintegration/imaging@master
- go mod tidy
- go mod vendor

All tests pass and build successful.

2025-12-07 14:00:12 -08:00

code.gitea.io/sdk/gitea

Bump code.gitea.io/sdk/gitea from 0.22.0 to 0.22.1 (#591 )

2025-11-02 12:23:33 -08:00

github.com

fix: update vulnerable dependencies to address security issues (#598 )

2025-12-07 14:00:12 -08:00

gitlab.com/gitlab-org/api/client-go

Bump gitlab.com/gitlab-org/api/client-go from 0.150.0 to 0.157.1 (#592 )

2025-11-02 12:24:28 -08:00

go.yaml.in/yaml/v3

Bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#579 )