Skip to content

Upgrade miekg/dns and x/crypto to resolve known CVEs#17

Merged
peterzen merged 2 commits intomasterfrom
copilot/update-dependencies
Mar 17, 2026
Merged

Upgrade miekg/dns and x/crypto to resolve known CVEs#17
peterzen merged 2 commits intomasterfrom
copilot/update-dependencies

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 17, 2026

Several known vulnerabilities in transitive and direct dependencies, including a critical CVE in golang.org/x/crypto and a moderate one in github.com/miekg/dns.

Dependency changes

golang.org/x/crypto is no longer a direct dependency of this module — the updated miekg/dns no longer requires it directly, but it remains in the build graph at a secure version.

Original prompt

This section details on the original issue you should resolve

<issue_title>Update dependencies</issue_title>
<issue_description>Update deps:

  • golang.org/x/crypto Version < 0.0.0-20200220183623-bac4c82f6975 Upgrade to ~> 0.0.0-20200220183623-bac4c82f6975
  • github.com/miekg/dns Version < 1.1.25 Upgrade to ~> 1.1.25

Known security vulnerabilities detected
Dependency github.com/miekg/dns 	Version < 1.1.25 	Upgrade to ~> 1.1.25
Defined in go.mod
Vulnerabilities
CVE-2019-19794 Moderate severity
Dependency golang.org/x/crypto 	Version < 0.0.0-20200220183623-bac4c82f6975 	Upgrade to ~> 0.0.0-20200220183623-bac4c82f6975
Defined in go.mod
Vulnerabilities
CVE-2024-45337 Critical severity
CVE-2020-9283 High severity
CVE-2020-7919 High severity
CVE-2022-27191 High severity
CVE-2021-43565 High severity
```</issue_description>

## Comments on the Issue (you are @copilot in this section)

<comments>
</comments>


📱 Kick off Copilot coding agent tasks wherever you are with GitHub Mobile, available on iOS and Android.

…at v0.25.0

Co-authored-by: peterzen <5878500+peterzen@users.noreply.github.com>
Copilot AI changed the title [WIP] Update dependencies for security vulnerabilities Upgrade miekg/dns and x/crypto to resolve known CVEs Mar 17, 2026
Copilot AI requested a review from peterzen March 17, 2026 12:35
@peterzen peterzen marked this pull request as ready for review March 17, 2026 12:36
@peterzen peterzen merged commit 39fd5e3 into master Mar 17, 2026
4 checks passed
@peterzen peterzen deleted the copilot/update-dependencies branch March 17, 2026 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update dependencies

2 participants