All pull requests

Pull requests

• Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.4

  dependenciesgo
  #115·dependabot[bot] opened Aug 3, 2026Bot·

  ·

• Bump actions/setup-go from 6 to 7

  dependenciesgithub_actions
  #114·dependabot[bot] opened Jul 20, 2026Bot·

  ·

• Bump golang.org/x/crypto from 0.51.0 to 0.52.0

  dependenciesgo
  #113·dependabot[bot] opened Jul 10, 2026Bot·

  ·

• Bump golang.org/x/net from 0.17.0 to 0.55.0

  dependenciesgo
  #112·dependabot[bot] opened Jul 2, 2026Bot·

  ·

• Bump actions/checkout from 4 to 7

  dependenciesgithub_actions
  #111·dependabot[bot] opened Jun 22, 2026Bot·

  ·

• Raise go directive to 1.26, fix non-constant format strings, and patch vulnerable deps

  #110·tas50 opened Jun 7, 2026Contributor·

  ·

• security: don't trust X-Forwarded-For when gating /debug/pprof

  #109·tas50 opened Jun 7, 2026Contributor·

  ·

• security: create log file with 0640 instead of world-writable 0666

  #108·tas50 opened Jun 7, 2026Contributor·

  ·

• security: bound request body size on bytes read, not Content-Length

  #107·tas50 opened Jun 7, 2026Contributor·

  ·

• security: clamp search start/rows to prevent slice-bounds panic

  #106·tas50 opened Jun 7, 2026Contributor·

  ·

• security: only update client admin/validator flags when supplied

  #105·tas50 opened Jun 7, 2026Contributor·

  ·

• security: use constant-time comparison for password hash check

  #104·tas50 opened Jun 7, 2026Contributor·

  ·

• security: set HTTP server timeouts to mitigate slow-client DoS

  #103·tas50 opened Jun 7, 2026Contributor·

  ·

• security: raise minimum TLS version to 1.2

  #102·tas50 opened Jun 7, 2026Contributor·

  ·

• Modernize Go idioms via gopls modernize analyzer

  #101·tas50 opened Jun 7, 2026Contributor·

  ·

• Update Chef copyright to 2026 and Progress Software

  #100·tas50 opened Jun 7, 2026Contributor·

  ·

• Bump github.com/hashicorp/go-retryablehttp from 0.5.4 to 0.7.7

  dependenciesgo
  #97·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump github.com/ctdk/chefcrypto from 0.2.0 to 1.0.0

  dependenciesgo
  #96·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump github.com/aws/aws-sdk-go from 1.4.6 to 1.55.8

  dependenciesgo
  #95·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump github.com/go-sql-driver/mysql from 1.2.1-0.20160802113842-0b58b37b664c to 1.10.0

  dependenciesgo
  #94·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump github.com/hashicorp/vault/api from 1.0.4 to 1.23.0

  dependenciesgo
  #93·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump actions/download-artifact from 4 to 8

  dependenciesgithub_actions
  #90·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump actions/upload-artifact from 4 to 7

  dependenciesgithub_actions
  #89·dependabot[bot] opened Jun 7, 2026Bot·

  ·

• Bump github.com/aws/aws-sdk-go from 1.4.6 to 1.34.0

  dependencies
  #84·dependabot[bot] opened Feb 14, 2023Bot·

  ·

• WIP: Up/fix memory leaks

  #81·alekc opened Aug 12, 2020·

  ·
  1