Commit 5550e7a
authored
Upgrade grpc-go to 1.82.1 for GHSA-hrxh-6v49-42gf (#1083)
## Summary
- Upgrade indirect dependency `google.golang.org/grpc` from 1.81.1 to 1.82.1, clearing Dependabot alert #3 (GHSA-hrxh-6v49-42gf, high severity: xDS RBAC authorization bypass and two server-side denial-of-service issues).
- roborev uses grpc only as an OTLP telemetry export client via `go.kenn.io/kit/telemetry`, so the vulnerable server-side paths are not reachable; the bump keeps the dependency off the vulnerable range.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: Wes McKinney <wesm@users.noreply.github.com>1 parent a35d7ea commit 5550e7a
3 files changed
Lines changed: 4 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
40 | | - | |
| 40 | + | |
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
156 | 156 | | |
157 | 157 | | |
158 | 158 | | |
159 | | - | |
| 159 | + | |
160 | 160 | | |
161 | 161 | | |
162 | 162 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
396 | 396 | | |
397 | 397 | | |
398 | 398 | | |
399 | | - | |
400 | | - | |
| 399 | + | |
| 400 | + | |
401 | 401 | | |
402 | 402 | | |
403 | 403 | | |
| |||
0 commit comments