pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/devel/go-tools



Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Dec 22 20:12:32 UTC 2024

Modified Files:
        pkgsrc/devel/go-tools: Makefile distinfo go-modules.mk
Added Files:
        pkgsrc/devel/go-tools/patches: patch-go.mod patch-go.sum

Log Message:
go-tools: update to 0.28 (security)

Contains a fix for GO-2024-3333:
Non-linear parsing of case-insensitive content in golang.org/x/net/html


To generate a diff of this commit:
cvs rdiff -u -r1.98 -r1.99 pkgsrc/devel/go-tools/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/devel/go-tools/distinfo
cvs rdiff -u -r1.6 -r1.7 pkgsrc/devel/go-tools/go-modules.mk
cvs rdiff -u -r0 -r1.1 pkgsrc/devel/go-tools/patches/patch-go.mod \
    pkgsrc/devel/go-tools/patches/patch-go.sum

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/go-tools/Makefile
diff -u pkgsrc/devel/go-tools/Makefile:1.98 pkgsrc/devel/go-tools/Makefile:1.99
--- pkgsrc/devel/go-tools/Makefile:1.98 Fri Oct 11 09:30:16 2024
+++ pkgsrc/devel/go-tools/Makefile      Sun Dec 22 20:12:32 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.98 2024/10/11 09:30:16 bsiegert Exp $
+# $NetBSD: Makefile,v 1.99 2024/12/22 20:12:32 bsiegert Exp $
 
-DISTNAME=              tools-0.26.0
+DISTNAME=              tools-0.28.0
 PKGNAME=               go-${DISTNAME}
 CATEGORIES=            devel
 MASTER_SITES=          ${MASTER_SITE_GITHUB:=golang/}

Index: pkgsrc/devel/go-tools/distinfo
diff -u pkgsrc/devel/go-tools/distinfo:1.14 pkgsrc/devel/go-tools/distinfo:1.15
--- pkgsrc/devel/go-tools/distinfo:1.14 Fri Oct 11 09:30:16 2024
+++ pkgsrc/devel/go-tools/distinfo      Sun Dec 22 20:12:32 2024
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.14 2024/10/11 09:30:16 bsiegert Exp $
+$NetBSD: distinfo,v 1.15 2024/12/22 20:12:32 bsiegert Exp $
 
 BLAKE2s (github.com_google_go-cmp_@v_v0.6.0.mod) = becdef0764c43b119969e6c10646c6fafece1f936110eaa977757d2e2e381cd0
 SHA512 (github.com_google_go-cmp_@v_v0.6.0.mod) = 89e0014b0c3ffa2578ab38c237fee3d2280d6955e810c83e426d4924cec07cfc796adc45074fc237629c5ff88a93044dc406472febf1adf73deae82cb1b24b80
@@ -12,36 +12,38 @@ Size (github.com_yuin_goldmark_@v_v1.4.1
 BLAKE2s (github.com_yuin_goldmark_@v_v1.4.13.zip) = 6d20dfb88cda5691e80260011c7fc1be6fc03fc417b6ac36d06d9f2563aafe39
 SHA512 (github.com_yuin_goldmark_@v_v1.4.13.zip) = 7441a7ca7a9fd67975c47920fa9d379e91c8c75b4a47845c90d89e0d904677b111866659b21b93c9abf5ac9d0cf278cc9f192fd6ae7c1ec3ff382c4b9aed0dca
 Size (github.com_yuin_goldmark_@v_v1.4.13.zip) = 229017 bytes
-BLAKE2s (golang.org_x_mod_@v_v0.21.0.mod) = 8864bfdeb5855b1b0df4972c15a73c6f0e9ca9fb40069d7bfed5cf9c39e4b93d
-SHA512 (golang.org_x_mod_@v_v0.21.0.mod) = 1af6a7d754a49cd9215b84db4415672134221f606800452fa83e0caab65d9d0c085400583bc75454d628ceff7e012f727c2e595124394a16e080ff25ed63a1e6
-Size (golang.org_x_mod_@v_v0.21.0.mod) = 86 bytes
-BLAKE2s (golang.org_x_mod_@v_v0.21.0.zip) = fd236392d4151a49d7d59c5d933a0c0872b1fd727fefb6ad3e0023c046036082
-SHA512 (golang.org_x_mod_@v_v0.21.0.zip) = e026430429cfc22a47d2589f1a3606a29320c1b34f9ffab570c0b79c8ff8d43446846d6c0d66754fa82965d15a584ce4c10d2168fb85d557ce96dc02fec2546a
-Size (golang.org_x_mod_@v_v0.21.0.zip) = 167512 bytes
-BLAKE2s (golang.org_x_net_@v_v0.30.0.mod) = 7666df87ae152753b9dd4dcf91408e810603fdf6d75de042e9316c94f722403b
-SHA512 (golang.org_x_net_@v_v0.30.0.mod) = 99710f756a16f3c7ae95d277ac0cec26d5ba1cfb44b681a313e3021d32d879b60e10f28c0b0d166e744b8521385c8aa9d8a9c885949db4477b14c2b95ce7cc75
-Size (golang.org_x_net_@v_v0.30.0.mod) = 155 bytes
-BLAKE2s (golang.org_x_net_@v_v0.30.0.zip) = 013ced8b5c0d313d2e2b1eb4829d68d6f03d2ac196c613c14b1ad99fc7af73d3
-SHA512 (golang.org_x_net_@v_v0.30.0.zip) = ffe823b4f0a319c93e57dc026ff833b0b6373fe477ca01253e18001c7b2cf5b03a93cbdd7ba4606501c9691b459f6db2d0126775c9050f560a667a797fd0582b
-Size (golang.org_x_net_@v_v0.30.0.zip) = 1842318 bytes
-BLAKE2s (golang.org_x_sync_@v_v0.8.0.mod) = 0fa1fb1833cee855281d59c95598cae38e2fd86ea0c52c4b67ba2e815fb513b3
-SHA512 (golang.org_x_sync_@v_v0.8.0.mod) = 2d159d931db45104e0714e311698dff5905d206e5740cb4f7e1442d1b561da91928b0882f9f56f8190abb7cddadeaec7684f8d598fb6afd6322c5782232b4d5b
-Size (golang.org_x_sync_@v_v0.8.0.mod) = 34 bytes
-BLAKE2s (golang.org_x_sync_@v_v0.8.0.zip) = a43836d77a3dc8d29957cfb85f4d9f35b8aa7fd05e23797a9fbbb6221996fbc7
-SHA512 (golang.org_x_sync_@v_v0.8.0.zip) = 27f56bbaeef3f2b143057205bf98e1277ba96daedeedc19c237d80b8c26874f56ac96c73f2b9e9081b2a90c98fed758ad8f27881bc1982d0aa32d18f4426bf2d
-Size (golang.org_x_sync_@v_v0.8.0.zip) = 26973 bytes
-BLAKE2s (golang.org_x_sys_@v_v0.26.0.mod) = 546db01fa3b030f3f3b5f8d3674bc29d1f026a60a57e474fff3e1cd44fe694a1
-SHA512 (golang.org_x_sys_@v_v0.26.0.mod) = ec229018bf6fa169913d0c66821fc296766b8a71720123e8d8cfcf5b8b8da110e338d03b8233b1224b8586ea9d9e4231b9720c1f806d4be2523413c521acf97b
-Size (golang.org_x_sys_@v_v0.26.0.mod) = 33 bytes
-BLAKE2s (golang.org_x_sys_@v_v0.26.0.zip) = e3ebcd7b58da981dc57aa3b59d6a3b896ec2d2fbc43ab39bee2228f48e6205c2
-SHA512 (golang.org_x_sys_@v_v0.26.0.zip) = e00a7315ae42ba096c8256a709f32249f6bdcfd9edee79fc11ac8d8d2438514e20aa06faacea3268afb90d53af39e5431ee3656ecb89b87f23f5a431be9b34d2
-Size (golang.org_x_sys_@v_v0.26.0.zip) = 1970363 bytes
+BLAKE2s (golang.org_x_mod_@v_v0.22.0.mod) = 8864bfdeb5855b1b0df4972c15a73c6f0e9ca9fb40069d7bfed5cf9c39e4b93d
+SHA512 (golang.org_x_mod_@v_v0.22.0.mod) = 1af6a7d754a49cd9215b84db4415672134221f606800452fa83e0caab65d9d0c085400583bc75454d628ceff7e012f727c2e595124394a16e080ff25ed63a1e6
+Size (golang.org_x_mod_@v_v0.22.0.mod) = 86 bytes
+BLAKE2s (golang.org_x_mod_@v_v0.22.0.zip) = 2ff96057fe32165d7cf4273467f6ef3286931b05ede8c236dc4aefceb0936bae
+SHA512 (golang.org_x_mod_@v_v0.22.0.zip) = 0c69bb18e14f1266446ea5e785985e7e32aacf90bec6ab67701e9b995c241b963ee04c8c482d3655ae3fd9f30a951fab5994aa6a167133843409de247786a6c8
+Size (golang.org_x_mod_@v_v0.22.0.zip) = 171532 bytes
+BLAKE2s (golang.org_x_net_@v_v0.33.0.mod) = f788f4710657af0522d0f4e2232c311435415820ea56dd4e7b395082b4b3300c
+SHA512 (golang.org_x_net_@v_v0.33.0.mod) = d211abfb7b05b434907e20bdf326b36b22f0b2a5421310538ebe73d5aa2b1cb927579e55d7a2fa890b8b988ae3ac61581594ed69e060ee6c2e944344ca5396d1
+Size (golang.org_x_net_@v_v0.33.0.mod) = 155 bytes
+BLAKE2s (golang.org_x_net_@v_v0.33.0.zip) = 5977e2d431c42dfeca5c1a8df8069f6bbfb7b736a56c6b3438ee6e6ae9e7d322
+SHA512 (golang.org_x_net_@v_v0.33.0.zip) = e2f984c22cae5a03dc9272cfb71058e040650260e1c2f240c04c694079e1bdd34bd50ca2737ef4f932f0d331f066bbcef9340ae37afe0ea79353c01e8ab05172
+Size (golang.org_x_net_@v_v0.33.0.zip) = 1852131 bytes
+BLAKE2s (golang.org_x_sync_@v_v0.10.0.mod) = 0fa1fb1833cee855281d59c95598cae38e2fd86ea0c52c4b67ba2e815fb513b3
+SHA512 (golang.org_x_sync_@v_v0.10.0.mod) = 2d159d931db45104e0714e311698dff5905d206e5740cb4f7e1442d1b561da91928b0882f9f56f8190abb7cddadeaec7684f8d598fb6afd6322c5782232b4d5b
+Size (golang.org_x_sync_@v_v0.10.0.mod) = 34 bytes
+BLAKE2s (golang.org_x_sync_@v_v0.10.0.zip) = f983e848d6cfdd694ebc4c679039f92ddc1f7abf5a54ad998bc98dac2de60fcc
+SHA512 (golang.org_x_sync_@v_v0.10.0.zip) = f0d7c32a55a79cc73fa70419b54151454d5a46669f40161120b93abd897d6d849f5ead90a1fd39500c9451c2d06a5f64134fb6f92dce62d0147ea8b9ac7de602
+Size (golang.org_x_sync_@v_v0.10.0.zip) = 26934 bytes
+BLAKE2s (golang.org_x_sys_@v_v0.28.0.mod) = 546db01fa3b030f3f3b5f8d3674bc29d1f026a60a57e474fff3e1cd44fe694a1
+SHA512 (golang.org_x_sys_@v_v0.28.0.mod) = ec229018bf6fa169913d0c66821fc296766b8a71720123e8d8cfcf5b8b8da110e338d03b8233b1224b8586ea9d9e4231b9720c1f806d4be2523413c521acf97b
+Size (golang.org_x_sys_@v_v0.28.0.mod) = 33 bytes
+BLAKE2s (golang.org_x_sys_@v_v0.28.0.zip) = b848c74c304a4e29158514d90a8bcc1535296bc4d44cb1eb2f78d4c10b7590e8
+SHA512 (golang.org_x_sys_@v_v0.28.0.zip) = 713c73ae6a90b0cbddebaec4247a226ee369852a5e5740dbbb8475c7c4a7a72dadd5253f4b670fc9d2240b5989e2c91b2c4e5ef94d0d73843c57bd9e3df474f7
+Size (golang.org_x_sys_@v_v0.28.0.zip) = 1983555 bytes
 BLAKE2s (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.mod) = 641e7d277cdf0bb73066a1687aea77a168ccc7ef59a6d24021de2c5f5de18a98
 SHA512 (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.mod) = 
942f9e29c12ba88c1bff9f0fb8185c7180b84d8bfd82e673717e1ece35834e19674aa68f7c99ad6629e1d6e75ab24e5ab817c3d3046b7a9f1f136aa3e8c1ac1f
 Size (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.mod) = 138 bytes
 BLAKE2s (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.zip) = 71d963b5eb50d395e0ca1ea4a88b3e998e955d19b4d4e94638f2d0029bd0415c
 SHA512 (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.zip) = 
712efb438f1f24aef7026791c2c0b3544892db5b49e67231bed27c548350cac63ced3637b7cd30af93fcd66026cefe3b8bf7aaf8802392d396a80483b181f8e0
 Size (golang.org_x_telemetry_@v_v0.0.0-20240521205824-bda55230c457.zip) = 961050 bytes
-BLAKE2s (tools-0.26.0.tar.gz) = 605bc1bf08d29bc5e55da01a6ab27349fc630358f77547c05f8f3f5679823ddd
-SHA512 (tools-0.26.0.tar.gz) = 592dbe7437b996290e5b171f34b66ca56f66cc52e79d462675d33bcc2792fb0f20a42148406eb822ec6985259f739639f5df1cec8fd01d0f75109a00f9dbb9ce
-Size (tools-0.26.0.tar.gz) = 7026830 bytes
+BLAKE2s (tools-0.28.0.tar.gz) = f6a967c01d8518e079854af0e5938b6ee1a869f69c8edc307e48d65dcf21acae
+SHA512 (tools-0.28.0.tar.gz) = 325595736259e74b2249ba183d73690d557e64d80183d109a2f443ccd1e64146595a367452639e2d032b194b31615eb2ecdd4b971ae9a8bbb06fa68b5578a713
+Size (tools-0.28.0.tar.gz) = 7452244 bytes
+SHA1 (patch-go.mod) = 6a183e20a074a8d33e6f989cd8a403e099599087
+SHA1 (patch-go.sum) = 6bb2fd1be7b68a6ade8cd8fb4f567dc97a2da88c

Index: pkgsrc/devel/go-tools/go-modules.mk
diff -u pkgsrc/devel/go-tools/go-modules.mk:1.6 pkgsrc/devel/go-tools/go-modules.mk:1.7
--- pkgsrc/devel/go-tools/go-modules.mk:1.6     Fri Oct 11 09:30:16 2024
+++ pkgsrc/devel/go-tools/go-modules.mk Sun Dec 22 20:12:32 2024
@@ -1,16 +1,16 @@
-# $NetBSD: go-modules.mk,v 1.6 2024/10/11 09:30:16 bsiegert Exp $
+# $NetBSD: go-modules.mk,v 1.7 2024/12/22 20:12:32 bsiegert Exp $
 
 GO_MODULE_FILES+=      github.com/google/go-cmp/@v/v0.6.0.mod
 GO_MODULE_FILES+=      github.com/google/go-cmp/@v/v0.6.0.zip
 GO_MODULE_FILES+=      github.com/yuin/goldmark/@v/v1.4.13.mod
 GO_MODULE_FILES+=      github.com/yuin/goldmark/@v/v1.4.13.zip
-GO_MODULE_FILES+=      golang.org/x/mod/@v/v0.21.0.mod
-GO_MODULE_FILES+=      golang.org/x/mod/@v/v0.21.0.zip
-GO_MODULE_FILES+=      golang.org/x/net/@v/v0.30.0.mod
-GO_MODULE_FILES+=      golang.org/x/net/@v/v0.30.0.zip
-GO_MODULE_FILES+=      golang.org/x/sync/@v/v0.8.0.mod
-GO_MODULE_FILES+=      golang.org/x/sync/@v/v0.8.0.zip
-GO_MODULE_FILES+=      golang.org/x/sys/@v/v0.26.0.mod
-GO_MODULE_FILES+=      golang.org/x/sys/@v/v0.26.0.zip
+GO_MODULE_FILES+=      golang.org/x/mod/@v/v0.22.0.mod
+GO_MODULE_FILES+=      golang.org/x/mod/@v/v0.22.0.zip
+GO_MODULE_FILES+=      golang.org/x/net/@v/v0.33.0.mod
+GO_MODULE_FILES+=      golang.org/x/net/@v/v0.33.0.zip
+GO_MODULE_FILES+=      golang.org/x/sync/@v/v0.10.0.mod
+GO_MODULE_FILES+=      golang.org/x/sync/@v/v0.10.0.zip
+GO_MODULE_FILES+=      golang.org/x/sys/@v/v0.28.0.mod
+GO_MODULE_FILES+=      golang.org/x/sys/@v/v0.28.0.zip
 GO_MODULE_FILES+=      golang.org/x/telemetry/@v/v0.0.0-20240521205824-bda55230c457.mod
 GO_MODULE_FILES+=      golang.org/x/telemetry/@v/v0.0.0-20240521205824-bda55230c457.zip

Added files:

Index: pkgsrc/devel/go-tools/patches/patch-go.mod
diff -u /dev/null pkgsrc/devel/go-tools/patches/patch-go.mod:1.1
--- /dev/null   Sun Dec 22 20:12:32 2024
+++ pkgsrc/devel/go-tools/patches/patch-go.mod  Sun Dec 22 20:12:32 2024
@@ -0,0 +1,14 @@
+$NetBSD: patch-go.mod,v 1.1 2024/12/22 20:12:32 bsiegert Exp $
+
+Update /x/net version to remove a vulnerability.
+--- go.mod.orig        2024-12-22 19:58:57.194168637 +0000
++++ go.mod
+@@ -6,7 +6,7 @@ require (
+       github.com/google/go-cmp v0.6.0
+       github.com/yuin/goldmark v1.4.13
+       golang.org/x/mod v0.22.0
+-      golang.org/x/net v0.32.0
++      golang.org/x/net v0.33.0
+       golang.org/x/sync v0.10.0
+       golang.org/x/telemetry v0.0.0-20240521205824-bda55230c457
+ )
Index: pkgsrc/devel/go-tools/patches/patch-go.sum
diff -u /dev/null pkgsrc/devel/go-tools/patches/patch-go.sum:1.1
--- /dev/null   Sun Dec 22 20:12:32 2024
+++ pkgsrc/devel/go-tools/patches/patch-go.sum  Sun Dec 22 20:12:32 2024
@@ -0,0 +1,16 @@
+$NetBSD: patch-go.sum,v 1.1 2024/12/22 20:12:32 bsiegert Exp $
+
+Update /x/net version to remove a vulnerability.
+--- go.sum.orig        2024-12-22 19:59:05.548172330 +0000
++++ go.sum
+@@ -4,8 +4,8 @@ github.com/yuin/goldmark v1.4.13 h1:fVcF
+ github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+ golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4=
+ golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
+-golang.org/x/net v0.32.0 h1:ZqPmj8Kzc+Y6e0+skZsuACbx+wzMgo5MQsJh9Qd6aYI=
+-golang.org/x/net v0.32.0/go.mod h1:CwU0IoeOlnQQWJ6ioyFrfRuomB8GKF6KbYXZVyeXNfs=
++golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
++golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+ golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
+ golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+ golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=



Home | Main Index | Thread Index | Old Index