8000 chore: upgrade dependencies to latest versions and fix security vulne… by houseme · Pull Request #4237 · gogf/gf · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

chore: upgrade dependencies to latest versions and fix security vulne… #4237

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

houseme
Copy link
Member
@houseme houseme commented Apr 8, 2025

This PR includes the following updates and fixes:

  • Dependency upgrades: Updated all dependencies in go.mod to their latest versions to ensure compatibility and leverage the latest features and fixes.
  • Security fixes:
    • Resolved known vulnerabilities in golang.org/x/net by upgrading to the latest secure version.
    • Addressed security issues in golang.org/x/crypto by upgrading to the latest secure version.

These changes improve the overall security and stability of the project. Please review the changes and ensure compatibility with the updated dependencies.

…rabilities

- Updated all package dependencies to their latest versions
- Addressed security vulnerabilities in `golang.org/x/net` and `golang.org/x/crypto`
@houseme houseme requested review from gqcn, hailaz and Copilot April 8, 2025 10:24
Copy link
Contributor
@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 33 out of 53 changed files in this pull request and generated no comments.

Files not reviewed (20)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
  • contrib/drivers/sqlite/go.mod: Language not supported
  • contrib/drivers/sqlitecgo/go.mod: Language not supported
  • contrib/metric/otelmetric/go.mod: Language not supported
  • contrib/nosql/redis/go.mod: Language not supported
  • contrib/registry/consul/go.mod: Language not supported
  • contrib/registry/etcd/go.mod: Language not supported
  • contrib/registry/file/go.mod: Language not supported
  • contrib/registry/nacos/go.mod: Language not supported
  • contrib/registry/polaris/go.mod: Language not supported

@houseme houseme requested a review from Copilot April 8, 2025 10:31
Copy link
Contributor
@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 37 out of 55 changed files in this pull request and generated no comments.

Files not reviewed (18)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
  • contrib/drivers/sqlite/go.mod: Language not supported
  • contrib/drivers/sqlitecgo/go.mod: Language not supported
  • contrib/metric/otelmetric/go.mod: Language not supported
  • contrib/nosql/redis/go.mod: Language not supported
  • contrib/registry/consul/go.mod: Language not supported
  • contrib/registry/etcd/go.mod: Language not supported
  • contrib/registry/file/go.mod: Language not supported

@houseme houseme requested a review from Copilot April 8, 2025 17:56
Copy link
Contributor
@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 67 out of 78 changed files in this pull request and generated no comments.

Files not reviewed (11)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
Comments suppressed due to low confidence (13)

container/gvar/gvar_z_example_test.go:18

  • [nitpick] Renaming 'ExampleVarNew' to 'ExampleNew' might break the convention used for Go example tests; please verify that the new name still correctly references the intended example context.
func ExampleNew() {

container/gtree/gtree_z_example_redblacktree_test.go:547

  • [nitpick] Changing the suffix from 'Normal' to 'normal' may impact how the example function is recognized; ensure this rename aligns with Go's example naming conventions.
func ExampleRedBlackTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_redblacktree_test.go:567

  • [nitpick] The rename from 'NoExistKey' to 'noExistKey' may affect test discovery; please confirm that the change preserves the intended exported function behavior.
func ExampleRedBlackTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_redblacktree_test.go:582

  • [nitpick] Modifying 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might alter how Go detects this example; ensure consistency with standard naming conventions.
func ExampleRedBlackTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_btree_test.go:561

  • [nitpick] Changing the suffix 'Normal' to 'normal' could impact example test detection; please verify that this naming style remains compliant with Go's conventions.
func ExampleBTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_btree_test.go:581

  • [nitpick] Renaming from 'NoExistKey' to 'noExistKey' may affect example recognition; confirm that this change does not impact documentation or test execution.
func ExampleBTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_btree_test.go:596

  • [nitpick] Changing 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might interfere with example function lookup; please ensure this naming change is intentional.
func ExampleBTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_avltree_test.go:635

  • [nitpick] Altering 'Normal' to 'normal' in the example function name could affect Go's example detection; please confirm that this adheres to the expected naming guidelines.
func ExampleAVLTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_avltree_test.go:655

  • [nitpick] Renaming 'NoExistKey' to 'noExistKey' may disrupt standard example identification; please verify that the new name meets the necessary conventions.
func ExampleAVLTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_avltree_test.go:670

  • [nitpick] Changing 'NoExistKeyAndMatchFalse' to 'noExistKeyAndMatchFalse' might prevent the example from being recognized; ensure that the revised naming complies with Go test conventions.
func ExampleAVLTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gset/gset_z_example_any_test.go:156

  • [nitpick] Modifying 'ContainsI' to 'containsI' alters the case and may affect Go's example test detection; please verify that this name change is deliberate and consistent.
func ExampleSet_containsI() {

container/gring/gring_z_example_test.go:144

  • [nitpick] Changing 'Common' to 'common' in the function name could impact how the example is discovered; please ensure that this renaming maintains the intended usage.
func ExampleRing_Link_common() {

container/gring/gring_z_example_test.go:170

  • [nitpick] Updating 'SameRing' to 'sameRing' might affect example function export; please double-check that the naming follows Go's conventions for examples.
func ExampleRing_Link_sameRing() {

@houseme
Copy link
Member Author
houseme commented Apr 16, 2025

#4244

@Issues-translate-bot
Copy link

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑 8000 ‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


#4244

@houseme houseme requested a review from Copilot May 7, 2025 00:01
Copy link
Contributor
@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades project dependencies and fixes identified security vulnerabilities while also updating CI configurations to support newer runtime environments.

  • Upgraded dependencies in go.mod and updated vulnerable libraries.
  • Updated workflow configurations to use newer Ubuntu and Go versions.
  • Renamed example test functions for naming consistency.

Reviewed Changes

Copilot reviewed 67 out of 78 changed files in this pull request and generated no comments.

Show a summary per file
File Description
container/gvar/gvar_z_example_test.go Renamed example function to align with current API.
container/gtree/gtree_z_example_redblacktree_test.go Adjusted function names to use consistent case style.
container/gtree/gtree_z_example_btree_test.go Adjusted function names to use consistent case style.
container/gtree/gtree_z_example_avltree_test.go Adjusted function names to use consistent case style.
container/gset/gset_z_example_any_test.go Renamed function for consistent naming conventions.
container/gring/gring_z_example_test.go Renamed example functions to follow consistent naming.
Files not reviewed (11)
  • contrib/config/apollo/go.mod: Language not supported
  • contrib/config/consul/go.mod: Language not supported
  • contrib/config/kubecm/go.mod: Language not supported
  • contrib/config/nacos/go.mod: Language not supported
  • contrib/config/polaris/go.mod: Language not supported
  • contrib/drivers/clickhouse/go.mod: Language not supported
  • contrib/drivers/dm/go.mod: Language not supported
  • contrib/drivers/mssql/go.mod: Language not supported
  • contrib/drivers/mysql/go.mod: Language not supported
  • contrib/drivers/oracle/go.mod: Language not supported
  • contrib/drivers/pgsql/go.mod: Language not supported
Comments suppressed due to low confidence (13)

container/gvar/gvar_z_example_test.go:18

  • [nitpick] The function was renamed from ExampleVarNew to ExampleNew. Confirm that this naming aligns with the exported API and overall naming conventions for examples.
func ExampleNew() {

container/gtree/gtree_z_example_redblacktree_test.go:547

  • [nitpick] Changing 'Normal' to 'normal' impacts the readability. Consider using a consistent capitalization strategy for example test names.
func ExampleRedBlackTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_redblacktree_test.go:567

  • [nitpick] The renaming to lower case 'noExistKey' deviates from usual camel case styling. Consider standardizing the naming pattern across all examples.
func ExampleRedBlackTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_redblacktree_test.go:582

  • [nitpick] Ensure that the modified naming conventions for the example functions are consistent and clear for all similar test cases.
func ExampleRedBlackTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_btree_test.go:561

  • [nitpick] The function name now uses lower case 'normal'; standardize naming conventions for clarity and consistency with other examples.
func ExampleBTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_btree_test.go:581

  • [nitpick] Renaming to 'noExistKey' should be reviewed for consistency with similar naming patterns; consider camelCase if applicable.
func ExampleBTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_btree_test.go:596

  • [nitpick] The updated naming convention should be applied consistently; ensure that this naming is clear and aligns with other examples.
func ExampleBTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gtree/gtree_z_example_avltree_test.go:635

  • [nitpick] The renaming to use 'normal' in lower case may reduce readability; consider a consistent naming approach across all test examples.
func ExampleAVLTree_IteratorAscFrom_normal() {

container/gtree/gtree_z_example_avltree_test.go:655

  • [nitpick] The change to use lower-case in 'noExistKey' should be evaluated against project naming conventions for test examples.
func ExampleAVLTree_IteratorAscFrom_noExistKey() {

container/gtree/gtree_z_example_avltree_test.go:670

  • [nitpick] Ensure that the naming for the example tests remains consistent in style with similar functions across the codebase.
func ExampleAVLTree_IteratorAscFrom_noExistKeyAndMatchFalse() {

container/gset/gset_z_example_any_test.go:156

  • [nitpick] The function name now uses lower-case 'containsI'; verify that this change is consistent with the project's naming conventions for test examples.
func ExampleSet_containsI() {

container/gring/gring_z_example_test.go:144

  • [nitpick] The change from 'Common' to 'common' alters the naming convention; consider standardizing the case for clarity in test examples.
func ExampleRing_Link_common() {

container/gring/gring_z_example_test.go:170

  • [nitpick] Renaming to use lower-case 'sameRing' should be revisited to ensure consistency with the naming style of other example functions.
func ExampleRing_Link_sameRing() {

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0