Skip to content

fix(deps): update module github.com/gogo/protobuf to v1.3.2 [security]#21

Open
renovate[bot] wants to merge 1 commit intotidbcloud/masterfrom
renovate/go-github.com-gogo-protobuf-vulnerability
Open

fix(deps): update module github.com/gogo/protobuf to v1.3.2 [security]#21
renovate[bot] wants to merge 1 commit intotidbcloud/masterfrom
renovate/go-github.com-gogo-protobuf-vulnerability

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Aug 8, 2024

This PR contains the following updates:

Package Change Age Confidence
github.com/gogo/protobuf v1.3.1v1.3.2 age confidence

GitHub Vulnerability Alerts

CVE-2021-3121

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.


Release Notes

gogo/protobuf (github.com/gogo/protobuf)

v1.3.2: Release v.1.3.2

Compare Source

Tested versions:

go 1.15.6
protoc 3.14.0

Bug fixes:

skippy peanut butter


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Author

renovate bot commented Aug 8, 2024

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/tools v0.0.0-20200904185747-39188db58858 -> v0.0.0-20210106214847-113979e3529a

@renovate
Copy link
Copy Markdown
Author

renovate bot commented Mar 1, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
golang.org/x/tools v0.0.0-20200904185747-39188db58858 -> v0.0.0-20210106214847-113979e3529a

@ti-chi-bot ti-chi-bot bot added the size/S label Mar 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants