bbdcbca83a
Update the vendored golang.org/x/net module to the latest version, which in turn updates the vendored copy of the golang.org/x/text module to 0.3.3. That version of x/text includes a mitigation of CVE-2020-14040, which pertains to processing UTF-16 data with a Byte Order Mark. The Git LFS client should not be affected by that security issue, since it does not open streams in UTF-16 mode, but we update our modules to stay current with the upstream Go sources and also to avoid being flagged by security scanners. The specific commands run to perform this update were: "go get golang.org/x/net@latest && go mod tidy && go mod vendor"
31 lines
1.3 KiB
Modula-2
31 lines
1.3 KiB
Modula-2
module github.com/git-lfs/git-lfs
|
|
|
|
require (
|
|
github.com/alexbrainman/sspi v0.0.0-20180125232955-4729b3d4d858 // indirect
|
|
github.com/avast/retry-go v2.4.2+incompatible
|
|
github.com/dpotapov/go-spnego v0.0.0-20190506202455-c2c609116ad0
|
|
github.com/git-lfs/gitobj/v2 v2.0.1
|
|
github.com/git-lfs/go-netrc v0.0.0-20180525200031-e0e9ca483a18
|
|
github.com/git-lfs/wildmatch v1.0.4
|
|
github.com/inconshreveable/mousetrap v1.0.0 // indirect
|
|
github.com/jcmturner/gofork v1.0.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.4
|
|
github.com/olekukonko/ts v0.0.0-20171002115256-78ecb04241c0
|
|
github.com/pkg/errors v0.0.0-20170505043639-c605e284fe17
|
|
github.com/rubyist/tracerx v0.0.0-20170927163412-787959303086
|
|
github.com/spf13/cobra v0.0.3
|
|
github.com/spf13/pflag v1.0.3 // indirect
|
|
github.com/ssgelm/cookiejarparser v1.0.1
|
|
github.com/stretchr/testify v1.5.1
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
github.com/xeipuuv/gojsonschema v0.0.0-20170210233622-6b67b3fab74d
|
|
golang.org/x/net v0.0.0-20210119194325-5f4716e94777
|
|
golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4
|
|
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68
|
|
gopkg.in/jcmturner/goidentity.v2 v2.0.0 // indirect
|
|
gopkg.in/yaml.v2 v2.2.8 // indirect
|
|
)
|
|
|
|
go 1.11
|