diff options
| author | Matěj Cepl <mcepl@cepl.eu> | 2025-03-18 04:40:02 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-03-18 03:40:02 +0000 |
| commit | 0ab94c9b7ac53ca9ab56febcf5cc3f26959e8b8a (patch) | |
| tree | 5d5f13c89dee119887e3e342fd3b60d6103f7637 /bridge/gitlab/event.go | |
| parent | d499b6e9d3333334614924669b74640a2d0b5485 (diff) | |
| download | git-bug-0ab94c9b7ac53ca9ab56febcf5cc3f26959e8b8a.tar.gz git-bug-0ab94c9b7ac53ca9ab56febcf5cc3f26959e8b8a.zip | |
deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
To avoid CVE-2024-45337 ("Misuse of ServerConfig.PublicKeyCallback may
cause authorization bypass in golang.org/x/crypto")
Related is also moving from the abandoned github.com/xanzy/go-gitlab to
the maintained gitlab.com/gitlab-org/api/client-go.
Diffstat (limited to 'bridge/gitlab/event.go')
| -rw-r--r-- | bridge/gitlab/event.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/bridge/gitlab/event.go b/bridge/gitlab/event.go index 92592e4d..6070c8e8 100644 --- a/bridge/gitlab/event.go +++ b/bridge/gitlab/event.go @@ -5,7 +5,7 @@ import ( "strings" "time" - "github.com/xanzy/go-gitlab" + "gitlab.com/gitlab-org/api/client-go" "github.com/git-bug/git-bug/util/text" ) |