From ff392d724aa2ff701ce9c3451e98760bd0a7b3cf Mon Sep 17 00:00:00 2001 From: Farjaad Rawasia Date: Tue, 7 Jul 2026 18:16:18 -0400 Subject: [PATCH 1/3] Bump github.com/buger/jsonparser from v1.1.1 to v1.1.2 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index f225fcf..ddc631e 100644 --- a/go.mod +++ b/go.mod @@ -51,7 +51,7 @@ require ( github.com/bombsimon/wsl/v4 v4.5.0 // indirect github.com/breml/bidichk v0.3.2 // indirect github.com/breml/errchkjson v0.4.0 // indirect - github.com/buger/jsonparser v1.1.1 // indirect + github.com/buger/jsonparser v1.1.2 // indirect github.com/butuzov/ireturn v0.3.1 // indirect github.com/butuzov/mirror v1.3.0 // indirect github.com/catenacyber/perfsprint v0.7.1 // indirect diff --git a/go.sum b/go.sum index 9438610..c9571e0 100644 --- a/go.sum +++ b/go.sum @@ -110,8 +110,8 @@ github.com/breml/bidichk v0.3.2 h1:xV4flJ9V5xWTqxL+/PMFF6dtJPvZLPsyixAoPe8BGJs= github.com/breml/bidichk v0.3.2/go.mod h1:VzFLBxuYtT23z5+iVkamXO386OB+/sVwZOpIj6zXGos= github.com/breml/errchkjson v0.4.0 h1:gftf6uWZMtIa/Is3XJgibewBm2ksAQSY/kABDNFTAdk= github.com/breml/errchkjson v0.4.0/go.mod h1:AuBOSTHyLSaaAFlWsRSuRBIroCh3eh7ZHh5YeelDIk8= -github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs= -github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0= +github.com/buger/jsonparser v1.1.2 h1:frqHqw7otoVbk5M8LlE/L7HTnIq2v9RX6EJ48i9AxJk= +github.com/buger/jsonparser v1.1.2/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0= github.com/butuzov/ireturn v0.3.1 h1:mFgbEI6m+9W8oP/oDdfA34dLisRFCj2G6o/yiI1yZrY= github.com/butuzov/ireturn v0.3.1/go.mod h1:ZfRp+E7eJLC0NQmk1Nrm1LOrn/gQlOykv+cVPdiXH5M= github.com/butuzov/mirror v1.3.0 h1:HdWCXzmwlQHdVhwvsfBb2Au0r3HyINry3bDWLYXiKoc= From 23c875a722e447cab5c05c2851bbd199c0768276 Mon Sep 17 00:00:00 2001 From: Farjaad Rawasia Date: Tue, 7 Jul 2026 18:25:21 -0400 Subject: [PATCH 2/3] Add automated changelog yaml from template --- .changes/unreleased/Dependency-20260707-182517.yaml | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 .changes/unreleased/Dependency-20260707-182517.yaml diff --git a/.changes/unreleased/Dependency-20260707-182517.yaml b/.changes/unreleased/Dependency-20260707-182517.yaml new file mode 100644 index 0000000..0b65d2f --- /dev/null +++ b/.changes/unreleased/Dependency-20260707-182517.yaml @@ -0,0 +1,3 @@ +kind: Dependency +body: Bump github.com/buger/jsonparser from v1.1.1 to v1.1.2 +time: 2026-07-07T18:25:17.428223-04:00 From debd0f753559b5a0996caa9ace3f4a65f65b2ad9 Mon Sep 17 00:00:00 2001 From: Farjaad Rawasia Date: Tue, 7 Jul 2026 18:26:09 -0400 Subject: [PATCH 3/3] Update changelog entry to reference CVE --- .changes/unreleased/Dependency-20260707-182517.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.changes/unreleased/Dependency-20260707-182517.yaml b/.changes/unreleased/Dependency-20260707-182517.yaml index 0b65d2f..1c65db6 100644 --- a/.changes/unreleased/Dependency-20260707-182517.yaml +++ b/.changes/unreleased/Dependency-20260707-182517.yaml @@ -1,3 +1,3 @@ kind: Dependency -body: Bump github.com/buger/jsonparser from v1.1.1 to v1.1.2 +body: Bump github.com/buger/jsonparser from v1.1.1 to v1.1.2 to fix CVE-2026-32285 (DoS vulnerability) time: 2026-07-07T18:25:17.428223-04:00