wayback icon indicating copy to clipboard operation
wayback copied to clipboard

fix(deps): update module mellium.im/xmpp to v0.22.0 [security]

Open renovate[bot] opened this issue 1 year ago • 2 comments

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
mellium.im/xmpp v0.21.4 -> v0.22.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-46957

Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing because the stanza type is not checked. This is fixed in 0.22.0.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Sep 25 '24 18:09 renovate[bot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
mellium.im/sasl v0.3.1 -> v0.3.2

renovate[bot] avatar Sep 25 '24 18:09 renovate[bot]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 45.08%. Comparing base (3505bdc) to head (4a64753). Report is 14 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #584      +/-   ##
==========================================
+ Coverage   44.56%   45.08%   +0.52%     
==========================================
  Files          84       86       +2     
  Lines        6815     6920     +105     
==========================================
+ Hits         3037     3120      +83     
- Misses       3484     3500      +16     
- Partials      294      300       +6     

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

codecov[bot] avatar Oct 12 '24 15:10 codecov[bot]