mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
chore: bump github.com/valyala/fasthttp from 1.66.0 to 1.67.0 (#20273)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.66.0 to 1.67.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's releases</a>.</em></p> <blockquote> <h2>v1.67.0</h2> <p>Special thanks to the following security researchers who reported the issues fixed in this release:</p> <ul> <li><a href="https://github.com/zer0yu"><code>@zer0yu</code></a> (Enze Wang)</li> <li><a href="https://github.com/P3ngu1nW"><code>@P3ngu1nW</code></a> (Jingcheng Yang)</li> <li><a href="https://github.com/9vvert"><code>@9vvert</code></a> (Zehui Miao)</li> </ul> <h2>What's Changed</h2> <ul> <li>Add DNS cache management methods for TCPDialer by <a href="https://github.com/aabishkaryal"><code>@aabishkaryal</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2072">valyala/fasthttp#2072</a></li> <li>Fix username:password@ validation in urls by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2080">valyala/fasthttp#2080</a></li> <li>Validate IPv6 addresses in urls by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2079">valyala/fasthttp#2079</a></li> <li>Validate schemes by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2078">valyala/fasthttp#2078</a></li> <li>Reject invalid hosts with multiple port delimiters by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2077">valyala/fasthttp#2077</a></li> <li>Reject backslash absolute URIs and cache parse errors by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2075">valyala/fasthttp#2075</a></li> <li>Reject bad ipv6 hostnames by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2076">valyala/fasthttp#2076</a></li> <li>Reimplement flushing support for fasthttpadaptor by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2081">valyala/fasthttp#2081</a></li> <li>chore(deps): bump securego/gosec from 2.22.8 to 2.22.9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/valyala/fasthttp/pull/2073">valyala/fasthttp#2073</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aabishkaryal"><code>@aabishkaryal</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/2072">valyala/fasthttp#2072</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/valyala/fasthttp/compare/v1.66.0...v1.67.0">https://github.com/valyala/fasthttp/compare/v1.66.0...v1.67.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/valyala/fasthttp/commit/b26ff4866918a81247d8ce1cbfe07c7da63b2940"><code>b26ff48</code></a> chore(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/2084">#2084</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/19624506292b2f05ed08774d1f6c814340efb409"><code>1962450</code></a> Fix copyTrailer</li> <li><a href="https://github.com/valyala/fasthttp/commit/2272d532e154f55d6a9cfe316109d2be850a6331"><code>2272d53</code></a> Reimplement flushing support for fasthttpadaptor (<a href="https://redirect.github.com/valyala/fasthttp/issues/2081">#2081</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/a17ec74999fe7a1f9a46d09d644584e73e97f908"><code>a17ec74</code></a> Reject bad ipv6 hostnames (<a href="https://redirect.github.com/valyala/fasthttp/issues/2076">#2076</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/f18eb9ef0c366b9ac212e41f4bce3378b215dbf2"><code>f18eb9e</code></a> Reject backslash absolute URIs and cache parse errors (<a href="https://redirect.github.com/valyala/fasthttp/issues/2075">#2075</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/bed90bcf091dc56b3098fb57cbbc1ca931d5ea34"><code>bed90bc</code></a> Reject invalid hosts with multiple port delimiters (<a href="https://redirect.github.com/valyala/fasthttp/issues/2077">#2077</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/d3fc68239107eb85a36b3baf0b9ca873cdf9b95f"><code>d3fc682</code></a> Validate schemes (<a href="https://redirect.github.com/valyala/fasthttp/issues/2078">#2078</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/af41f54adbd2b47323ae0b1caf76e79cb3c2e824"><code>af41f54</code></a> Validate IPv6 addresses in urls (<a href="https://redirect.github.com/valyala/fasthttp/issues/2079">#2079</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/75dcdb8bba3eac0eb091a68a5b401cf9755be0df"><code>75dcdb8</code></a> Fix username:password@ validation in urls (<a href="https://redirect.github.com/valyala/fasthttp/issues/2080">#2080</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/ede09fad738b7c16784e37064f49f89c960ecbb0"><code>ede09fa</code></a> Limit FuzzTestHeaderScanner body size</li> <li>Additional commits viewable in <a href="https://github.com/valyala/fasthttp/compare/v1.66.0...v1.67.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
@@ -181,7 +181,7 @@ require (
|
||||
github.com/tidwall/gjson v1.18.0
|
||||
github.com/u-root/u-root v0.14.0
|
||||
github.com/unrolled/secure v1.17.0
|
||||
github.com/valyala/fasthttp v1.66.0
|
||||
github.com/valyala/fasthttp v1.67.0
|
||||
github.com/wagslane/go-password-validator v0.3.0
|
||||
github.com/zclconf/go-cty-yaml v1.1.0
|
||||
go.mozilla.org/pkcs7 v0.9.0
|
||||
@@ -198,7 +198,7 @@ require (
|
||||
golang.org/x/crypto v0.42.0
|
||||
golang.org/x/exp v0.0.0-20250911091902-df9299821621
|
||||
golang.org/x/mod v0.28.0
|
||||
golang.org/x/net v0.44.0
|
||||
golang.org/x/net v0.45.0
|
||||
golang.org/x/oauth2 v0.31.0
|
||||
golang.org/x/sync v0.17.0
|
||||
golang.org/x/sys v0.37.0
|
||||
|
||||
Reference in New Issue
Block a user