huangzhenpc/yinghuoapi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 升级Go版本至1.25.6修复标准库安全漏洞

Browse Source 
修复GO-2026-4341和GO-2026-4340两个标准库漏洞
This commit is contained in:
shaw
2026-01-30 08:53:53 +08:00
parent cadca752c4
commit 6599b366dc
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/security-scan.yml vendored
View File

@@ -22,7 +22,7 @@ jobs:
cache-dependency-path: backend/go.sum cache-dependency-path: backend/go.sum
- name: Verify Go version - name: Verify Go version
run: | run: |
go version | grep -q 'go1.25.5' go version | grep -q 'go1.25.6'
- name: Run govulncheck - name: Run govulncheck
working-directory: backend working-directory: backend
run: | run: |

2
Dockerfile
View File

@@ -7,7 +7,7 @@
# ============================================================================= # =============================================================================
ARG NODE_IMAGE=node:24-alpine ARG NODE_IMAGE=node:24-alpine
ARG GOLANG_IMAGE=golang:1.25.5-alpine ARG GOLANG_IMAGE=golang:1.25.6-alpine
ARG ALPINE_IMAGE=alpine:3.20 ARG ALPINE_IMAGE=alpine:3.20
ARG GOPROXY=https://goproxy.cn,direct ARG GOPROXY=https://goproxy.cn,direct
ARG GOSUMDB=sum.golang.google.cn ARG GOSUMDB=sum.golang.google.cn

2
backend/go.mod
View File

@@ -1,6 +1,6 @@
module github.com/Wei-Shaw/sub2api module github.com/Wei-Shaw/sub2api
go 1.25.5 go 1.25.6
require ( require (
entgo.io/ent v0.14.5 entgo.io/ent v0.14.5