Skip to content

Fix security deps 20260609#83

Closed
upbeat-backbone-bose wants to merge 335 commits into
wikihost-opensource:masterfrom
upbeat-backbone-bose:fix-security-deps-20260609
Closed

Fix security deps 20260609#83
upbeat-backbone-bose wants to merge 335 commits into
wikihost-opensource:masterfrom
upbeat-backbone-bose:fix-security-deps-20260609

Conversation

@upbeat-backbone-bose

Copy link
Copy Markdown
Contributor

No description provided.

upbeat-backbone-bose and others added 30 commits November 24, 2025 10:58
…s/backend/go_modules-dd7da38a6b

build(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 in /backend in the go_modules group across 1 directory
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `4458c69` to `a3ed066`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@4458c69...a3ed066)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: a3ed06699fca657ce045dffa3a8ade5ff99012b0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…tions/actions/checkout-6

build(deps): bump actions/checkout from 5 to 6
…s/backend/github.com/spf13/cobra-1.10.2

build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in /backend
…s/ui/speedtest-a3ed066

build(deps): bump ui/speedtest from `4458c69` to `a3ed066`
Bumps the go_modules group with 1 update in the /backend directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go).


Updates `github.com/quic-go/quic-go` from 0.54.1 to 0.57.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.54.1...v0.57.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.57.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/backend/go_modules-15eab1e1d8

build(deps): bump github.com/quic-go/quic-go from 0.54.1 to 0.57.0 in /backend in the go_modules group across 1 directory
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.68 to 1.1.69.
- [Commits](miekg/dns@v1.1.68...v1.1.69)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…tions/actions/download-artifact-7

build(deps): bump actions/download-artifact from 6 to 7
…tions/actions/upload-artifact-6

build(deps): bump actions/upload-artifact from 5 to 6
…s/backend/github.com/miekg/dns-1.1.69

build(deps): bump github.com/miekg/dns from 1.1.68 to 1.1.69 in /backend
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `a3ed066` to `750f043`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@a3ed066...750f043)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: 750f043872f0315c00e9baed43307aa57ca6d0b1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/ui/speedtest-750f043

build(deps): bump ui/speedtest from `a3ed066` to `750f043`
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `750f043` to `746824b`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@750f043...746824b)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: 746824b77d7ca3b3b348e20302cff84534dcd18f
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/ui/speedtest-746824b

build(deps): bump ui/speedtest from `750f043` to `746824b`
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `746824b` to `9830af2`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@746824b...9830af2)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: 9830af2c3a0525d2df213e2682f2993f4ba7c651
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.69 to 1.1.70.
- [Commits](miekg/dns@v1.1.69...v1.1.70)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/ui/speedtest-9830af2

build(deps): bump ui/speedtest from `746824b` to `9830af2`
…s/backend/github.com/miekg/dns-1.1.70

build(deps): bump github.com/miekg/dns from 1.1.69 to 1.1.70 in /backend
Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.70 to 1.1.72.
- [Commits](miekg/dns@v1.1.70...v1.1.72)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `9830af2` to `734a35f`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@9830af2...734a35f)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: 734a35f89c8f7b6ed8a415337e32e40432df8200
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/backend/github.com/miekg/dns-1.1.72

build(deps): bump github.com/miekg/dns from 1.1.70 to 1.1.72 in /backend
…s/ui/speedtest-734a35f

build(deps): bump ui/speedtest from `9830af2` to `734a35f`
Bumps [ui/speedtest](https://github.com/librespeed/speedtest) from `734a35f` to `98f447c`.
- [Release notes](https://github.com/librespeed/speedtest/releases)
- [Commits](librespeed/speedtest@734a35f...98f447c)

---
updated-dependencies:
- dependency-name: ui/speedtest
  dependency-version: 98f447c8db55417a6b10a108f5f65251a2f5f36d
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/ui/speedtest-98f447c

build(deps): bump ui/speedtest from `734a35f` to `98f447c`
upbeat-backbone-bose and others added 28 commits May 25, 2026 16:16
…ctions/docker/setup-buildx-action-4.1.0

build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
…ctions/docker/build-push-action-7.2.0

build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0
…ctions/docker/login-action-4.2.0

build(deps): bump docker/login-action from 4.1.0 to 4.2.0
…yarn/ui/unplugin-vue-components-32.1.0

build(deps-dev): bump unplugin-vue-components from 32.0.0 to 32.1.0 in /ui
…yarn/ui/vite-8.0.14

build(deps-dev): bump vite from 8.0.13 to 8.0.14 in /ui
…yarn/ui/apexcharts-5.13.0

build(deps-dev): bump apexcharts from 5.12.0 to 5.13.0 in /ui
…yarn/ui/vue-i18n-11.4.4

build(deps-dev): bump vue-i18n from 11.4.2 to 11.4.4 in /ui
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [eslint](https://github.com/eslint/eslint) from 10.4.0 to 10.4.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.0...v10.4.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vue](https://github.com/vuejs/core) from 3.5.34 to 3.5.35.
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.34...v3.5.35)

---
updated-dependencies:
- dependency-name: vue
  dependency-version: 3.5.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ctions/docker/setup-qemu-action-4.1.0

build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0
…yarn/ui/eslint-10.4.1

build(deps-dev): bump eslint from 10.4.0 to 10.4.1 in /ui
…yarn/ui/vue-3.5.35

build(deps): bump vue from 3.5.34 to 3.5.35 in /ui
Bumps the go_modules group with 1 update in the /backend directory: [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go).


Updates `github.com/quic-go/quic-go` from 0.59.0 to 0.59.1
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.59.0...v0.59.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.59.1
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.14 to 8.0.16.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n) from 11.4.4 to 11.4.5.
- [Release notes](https://github.com/intlify/vue-i18n/releases)
- [Changelog](https://github.com/intlify/vue-i18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.5/packages/vue-i18n)

---
updated-dependencies:
- dependency-name: vue-i18n
  dependency-version: 11.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [apexcharts](https://github.com/apexcharts/apexcharts.js) from 5.13.0 to 5.14.0.
- [Release notes](https://github.com/apexcharts/apexcharts.js/releases)
- [Commits](apexcharts/apexcharts.js@v5.13.0...v5.14.0)

---
updated-dependencies:
- dependency-name: apexcharts
  dependency-version: 5.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…es/backend/go_modules-c3a371b575

build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 in /backend in the go_modules group across 1 directory
…yarn/ui/vite-8.0.16

build(deps-dev): bump vite from 8.0.14 to 8.0.16 in /ui
…yarn/ui/vue-i18n-11.4.5

build(deps-dev): bump vue-i18n from 11.4.4 to 11.4.5 in /ui
…yarn/ui/apexcharts-5.14.0

build(deps-dev): bump apexcharts from 5.13.0 to 5.14.0 in /ui
Bumps [github.com/reeflective/console](https://github.com/reeflective/console) from 0.1.25 to 0.3.1.
- [Release notes](https://github.com/reeflective/console/releases)
- [Commits](reeflective/console@v0.1.25...v0.3.1)

---
updated-dependencies:
- dependency-name: github.com/reeflective/console
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [axios](https://github.com/axios/axios) from 1.16.1 to 1.17.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.17.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vue-eslint-parser](https://github.com/vuejs/vue-eslint-parser) from 10.4.0 to 10.4.1.
- [Release notes](https://github.com/vuejs/vue-eslint-parser/releases)
- [Commits](vuejs/vue-eslint-parser@v10.4.0...v10.4.1)

---
updated-dependencies:
- dependency-name: vue-eslint-parser
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…es/backend/github.com/reeflective/console-0.3.1

build(deps): bump github.com/reeflective/console from 0.1.25 to 0.3.1 in /backend
…yarn/ui/axios-1.17.0

build(deps-dev): bump axios from 1.16.1 to 1.17.0 in /ui
…yarn/ui/vue-eslint-parser-10.4.1

build(deps-dev): bump vue-eslint-parser from 10.4.0 to 10.4.1 in /ui
@upbeat-backbone-bose upbeat-backbone-bose deleted the fix-security-deps-20260609 branch June 9, 2026 01:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant