Skip to content
This repository was archived by the owner on Mar 29, 2026. It is now read-only.

fix: resolve google.golang.org/grpc vulnerabilities - #112

Merged
bb111189 merged 1 commit into
masterfrom
fix/dependabot-go-critical-vulnerabilities-20260319
Mar 25, 2026
Merged

fix: resolve google.golang.org/grpc vulnerabilities#112
bb111189 merged 1 commit into
masterfrom
fix/dependabot-go-critical-vulnerabilities-20260319

Conversation

@bb111189

Copy link
Copy Markdown
Contributor

Summary

This PR resolves the critical google.golang.org/grpc vulnerability in blitz.

Changes

  • Updated google.golang.org/grpc from v1.74.2 to v1.79.3 in go.mod
  • Added matching go.sum entries with go mod download
  • Used the manual Go module update flow because go mod tidy is blocked by upstream dependency resolution errors in babylonlabs-io/finality-gadget

Security Impact

Verification

  • go mod download google.golang.org/grpc@v1.79.3 succeeds
  • go mod tidy remains blocked by upstream revision github.com/babylonlabs-io/finality-gadget@6d5e98aba949

@github-actions github-actions Bot added bug Something isn't working XS mergeable labels Mar 19, 2026
@bb111189
bb111189 requested a review from fyInALT March 19, 2026 07:50
@bb111189
bb111189 merged commit 7b735c3 into master Mar 25, 2026
2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

bug Something isn't working mergeable XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants