O scan Trivy do CI falhou no push anterior e impediu a publicacao das imagens, entao a producao seguiu na versao antiga. - webmail: next 15.5.21 -> 15.5.27 (RCE no otimizador de imagens e cache poisoning), sharp -> 0.35.5, source-map-js -> 1.2.2, dompurify -> 3.4.17 - protocols: golang.org/x/net 0.58 -> 0.60 (DoS HTTP/2) e toolchain Go 1.25 -> 1.26 (stdlib corrigida a partir de 1.26.9) Verificado localmente: imagens e repositorio sem achados HIGH/CRITICAL, testes e build verdes. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
37 lines
1.2 KiB
AMPL
37 lines
1.2 KiB
AMPL
module lambdamail/protocols
|
|
|
|
go 1.26.0
|
|
|
|
require (
|
|
blitiri.com.ar/go/spf v1.5.1
|
|
github.com/alexedwards/argon2id v1.0.0
|
|
github.com/coder/websocket v1.8.15
|
|
github.com/emersion/go-imap/v2 v2.0.0-beta.8
|
|
github.com/emersion/go-message v0.18.2
|
|
github.com/emersion/go-msgauth v0.7.0
|
|
github.com/emersion/go-sasl v0.0.0-20241020182733-b788ff22d5a6
|
|
github.com/emersion/go-smtp v0.24.0
|
|
github.com/fergusstrange/embedded-postgres v1.30.0
|
|
github.com/go-acme/lego/v4 v4.35.2
|
|
github.com/google/uuid v1.6.0
|
|
github.com/jackc/pgx/v5 v5.10.0
|
|
github.com/miekg/dns v1.1.72
|
|
golang.org/x/crypto v0.57.0
|
|
)
|
|
|
|
require (
|
|
github.com/cenkalti/backoff/v5 v5.0.3 // indirect
|
|
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
|
|
github.com/jackc/pgpassfile v1.0.0 // indirect
|
|
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
|
|
github.com/jackc/puddle/v2 v2.2.2 // indirect
|
|
github.com/lib/pq v1.10.9 // indirect
|
|
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
|
|
golang.org/x/mod v0.41.0 // indirect
|
|
golang.org/x/net v0.60.0 // indirect
|
|
golang.org/x/sync v0.23.0 // indirect
|
|
golang.org/x/sys v0.48.0 // indirect
|
|
golang.org/x/text v0.42.0 // indirect
|
|
golang.org/x/tools v0.49.0 // indirect
|
|
)
|