mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
Sahil BansalandGitHub
d9240eed82
* fix(deps): update golang.org/x modules to latest on the Go 1.25 line Clears the x/crypto, x/net, x/sys and x/text vulnerability findings reported against the pmg binary by image scanners. Deliberately kept back: the go directive stays 1.25.1 because the Go 1.26 move is blocked on goproxy URL parsing (see #390), and grpc stays pinned at v1.81.0 due to the trailers regression with v1.82.x. * fix(container): move runtime base to debian 13 and refresh builder pin The bullseye runtime base and the stale golang:1.25-bookworm digest (go1.25.5) accounted for most of the vulnerability findings in the published image. debian:13-slim is current stable and the refreshed golang digest carries go1.25.12, covering every flagged stdlib CVE.
6 lines
32 B
Plaintext
6 lines
32 B
Plaintext
go 1.25.1
|
|
|
|
use .
|
|
|
|
use ./scripts
|