Skip to content

build: update to fix vulnerabilities#88

Merged
tembleking merged 2 commits into
mainfrom
build-fix-vulns
Jun 9, 2026
Merged

build: update to fix vulnerabilities#88
tembleking merged 2 commits into
mainfrom
build-fix-vulns

Conversation

@tembleking

Copy link
Copy Markdown
Member

No description provided.

@tembleking tembleking self-assigned this Jun 9, 2026
Copilot AI review requested due to automatic review settings June 9, 2026 09:16
@tembleking tembleking requested a review from a team as a code owner June 9, 2026 09:16

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates Go module dependencies and Nix inputs/base images to address reported vulnerabilities, ensuring the project builds with refreshed upstream components in both Go and Nix-based packaging.

Changes:

  • Bumped Go dependencies (notably github.com/mark3labs/mcp-go and github.com/oapi-codegen/runtime) and refreshed indirect golang.org/x/* modules.
  • Updated Nix packaging/vendor hash to match the new Go dependency set.
  • Refreshed Nix flake inputs and updated the pinned base container image digests/hashes for amd64 and aarch64.

Reviewed changes

Copilot reviewed 4 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.nix Updates vendorHash to match the new Go vendor/dependency graph.
go.mod Bumps direct and indirect Go module versions to newer releases.
go.sum Updates module checksums to align with the dependency upgrades.
flake.lock Advances pinned nixpkgs revisions/hashes used by the flake.
docker-base-amd64.nix Updates pinned base image digest/hash for amd64 builds.
docker-base-aarch64.nix Updates pinned base image digest/hash for aarch64 builds.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

alecron
alecron previously approved these changes Jun 9, 2026
@tembleking tembleking merged commit 5949c1f into main Jun 9, 2026
6 checks passed
@tembleking tembleking deleted the build-fix-vulns branch June 9, 2026 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants