deps(go): bump the minor-and-patch group across 1 directory with 6 updates#25
Closed
dependabot[bot] wants to merge 246 commits into
Closed
deps(go): bump the minor-and-patch group across 1 directory with 6 updates#25dependabot[bot] wants to merge 246 commits into
dependabot[bot] wants to merge 246 commits into
Conversation
…ection String.replace() with a string replacement interprets $& as "insert the matched substring". The minified JS bundle contains many $& patterns (variable $ + bitwise &), causing the original <script src="..."></script> tag to be re-injected throughout the inlined code. This breaks the HTML by inserting </script> tags mid-stream, leading to SyntaxError: Identifier '$A' has already been declared. Using an arrow function as the replacement argument disables special pattern interpretation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…admin API - WASI plugin runtime (wasiplugin/runtime.go, httpbridge.go) with Wazero host imports - OrbPro license key broker plugin (wasmlicenseplugin/plugin.go) with P-256 ECDH - Plugin manager with UIProvider interface and manifest API (/api/v1/plugins/manifest) - Session-based auth system (handler, middleware, sessions, userstore, login page) - Admin peers API (internal/peers/admin.go) - WebUI Plugins page with card grid, iframe plugin UI, and navbar entry - JS SDK license client (sdn-js/src/license.ts) and HD wallet crypto additions - SpaceAware OrbPro loader updates for IPFS-path compatibility - Deploy script enhancements for license service provisioning Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Security: Switch sdn-server to hardened Emscripten WASI binary with Crypto++ constant-time operations, HMAC-DRBG entropy mixing, SecureAllocator, and optional FIPS mode. Fix Ed25519 sign/verify parameter order and mnemonic error code handling for hardened build API. Add hd_secure_dealloc support (wipe-before-free). Implement SLIP-10 Ed25519 derivation in pure Go. Storefront: Add payment chain verification, delivery hardening, and expanded store API with proper test coverage. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Update test fixtures to include uppercase characters as required by the password validation policy (12+ chars, uppercase, lowercase, digit). Add scripts/ci-local.sh to run CI checks locally when GitHub Actions minutes are exhausted, with pre-push hook for automatic validation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
… BIP-44 derivation - Fix /admin → /admin/ redirect so React SPA relative asset paths resolve correctly (root cause of CSS text/plain and JS 404 errors in production) - Change HD wallet derivation from custom coin type 1957 to standard BIP-44 Bitcoin (m/44'/0'/...) across Go server, JS SDK, and documentation - Add xpub-based TOFU auth with SDN extended public key format - Add frontend manager for admin-uploadable public homepage - Add local dev environment: config/dev.yaml, scripts/dev-local.sh, Dockerfile.dev, and docker-compose.dev.yaml with test wallet - Add pre-commit and post-commit git hooks for CI and auto-deploy Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add demo WASM module (demo.c) with exported computation functions - Add build-demo-wasm.js encryption script (AES-256-GCM + per-domain KEK wrapper) - Add server-side demo API (GET /demo, /api/v1/demo/payload, /api/v1/demo/info) - Add browser-side P-256 ECDH key exchange demo with SubtleCrypto (zero deps) - Re-enable HTTP key exchange endpoints on the OrbPro key broker plugin - Add IPFS pinning support for demo payload (optional, via ipfs_api_url config) - Fix docs.html mobile responsiveness (overflow-x, word-break, responsive breakpoints) - Source demo/.demo-env in dev-local.sh for key broker secrets - Add demo secrets to .gitignore Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add overflow containment and white-space: nowrap throughout the wallet network card hierarchy so long blockchain addresses and derivation paths properly truncate with ellipsis instead of overflowing the viewport. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Replace inline flex styles with .arch-row-split class that switches from side-by-side to column layout at the 734px mobile breakpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…dates Bumps the minor-and-patch group with 6 updates in the /sdn-server directory: | Package | From | To | | --- | --- | --- | | [github.com/DigitalArsenal/spacedatastandards.org/lib/go](https://github.com/DigitalArsenal/spacedatastandards.org) | `1.65.0` | `1.73.12` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.22` | `1.14.34` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.10.2` | | [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.7.0` | `1.11.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.48.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.12.0` | `0.14.0` | Updates `github.com/DigitalArsenal/spacedatastandards.org/lib/go` from 1.65.0 to 1.73.12 - [Release notes](https://github.com/DigitalArsenal/spacedatastandards.org/releases) - [Commits](DigitalArsenal/spacedatastandards.org@v1.65.0...v1.73.12) Updates `github.com/mattn/go-sqlite3` from 1.14.22 to 1.14.34 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.22...v1.14.34) Updates `github.com/spf13/cobra` from 1.8.0 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.0...v1.10.2) Updates `github.com/tetratelabs/wazero` from 1.7.0 to 1.11.0 - [Release notes](https://github.com/tetratelabs/wazero/releases) - [Commits](wazero/wazero@v1.7.0...v1.11.0) Updates `golang.org/x/crypto` from 0.47.0 to 0.48.0 - [Commits](golang/crypto@v0.47.0...v0.48.0) Updates `golang.org/x/time` from 0.12.0 to 0.14.0 - [Commits](golang/time@v0.12.0...v0.14.0) --- updated-dependencies: - dependency-name: github.com/DigitalArsenal/spacedatastandards.org/lib/go dependency-version: 1.73.12 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/tetratelabs/wazero dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: golang.org/x/crypto dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: golang.org/x/time dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/sdn-server/minor-and-patch-fdf528bf81
branch
2 times, most recently
from
February 23, 2026 04:58
c362a7a to
051c412
Compare
TJKoury
force-pushed
the
dependabot/go_modules/sdn-server/minor-and-patch-fdf528bf81
branch
from
February 24, 2026 13:40
051c412 to
a7f6f86
Compare
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/go_modules/sdn-server/minor-and-patch-fdf528bf81
branch
February 24, 2026 13:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 6 updates in the /sdn-server directory:
1.65.01.73.121.14.221.14.341.8.01.10.21.7.01.11.00.47.00.48.00.12.00.14.0Updates
github.com/DigitalArsenal/spacedatastandards.org/lib/gofrom 1.65.0 to 1.73.12Release notes
Sourced from github.com/DigitalArsenal/spacedatastandards.org/lib/go's releases.
... (truncated)
Commits
b01ef50fix: Switch Maven from old OSSRH to new Central Portal API81d8f55fix: Add Java package declarations for Maven Central buildb1f070bfix: Rename crate from digitalarsenal-standards to spacedatastandards-org64e5f50chore: Update PHP package to v1.73.9b24c69efix: Remove NuGet job, add Dart timeouta0da7bcfix: Add cross-namespace using directives for NuGet C# buildef9b82cfix: Add C# namespace wrapping for NuGet build1bd4c3afix: Workflow version detection and package fixes2e3b88dfeat: Add package manager links to download page9fecf89docs: Add CLAUDE.md with package naming guidelinesUpdates
github.com/mattn/go-sqlite3from 1.14.22 to 1.14.34Commits
2087331add script to create pull-requesta510883Upgrade SQLite to version 3051002dce6b34Add percentile extension3c885a9Upgrade SQLite to version 30510013e773a9update github workflows2f6a2bbfix upgrade scriptaa7cdd3update upgrade scripta66908ause quote include instead of angled include for sqlite3-binding.h8bf7a8aupdate amalgamation code2e165e0fix syntax errorUpdates
github.com/spf13/cobrafrom 1.8.0 to 1.10.2Release notes
Sourced from github.com/spf13/cobra's releases.
... (truncated)
Commits
88b30abchore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)346d408fix: actions/setup-go v6 (#2337)fc81d20refactor: change minUsagePadding from var to const (#2325)117698arefactor: replace several vars with consts (#2328)e2dd29dAdd documentation for repeated flags functionality (#2316)0629892Fix linter (#2327)7da941cchore: Bump pflag to v1.0.9 (#2305)51d6751Bump pflag to 1.0.8 (#2303)3f3b818Update README.md with new logodcaf42eAdd Periscope to the list of projects using Cobra (#2299)Updates
github.com/tetratelabs/wazerofrom 1.7.0 to 1.11.0Release notes
Sourced from github.com/tetratelabs/wazero's releases.
... (truncated)
Commits
fe2e751Use golang.org/x/sys (#2443)9286448Update Wasm 2.0 spec tests. (#2458)af80797Add go-libtiff to users.md (#2457)77db968Change version policy to two versions. (#2448)275c9a0Simplify utimens. (#2449)5e7c35eFix race condition in refCount initialization (#2447)cc1ca4cStreamline build tags: remove tinygo, cgo (#2446)ee3f9d9Fix syntax in release workflow (#2442)866305bUpdate runners, remove signed MSI (#2441)7d48ca5Introduce reference counting for compiled modules (#2427)Updates
golang.org/x/cryptofrom 0.47.0 to 0.48.0Commits
e08b067go.mod: update golang.org/x dependencies7d0074cscrypt: fix panic on parameters <= 0Updates
golang.org/x/timefrom 0.12.0 to 0.14.0Commits
2b4e439rate: use time.Time.Equal instead of ==c0b0320all: upgrade go directive to at least 1.24.0 [generated]Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions