mirror of
https://github.com/fatedier/frp.git
synced 2026-10-15 02:35:56 +08:00
f8be1cdfe2
x/crypto v0.56.0 fixes two denial-of-service bugs in golang.org/x/crypto/ssh channel handling (GO-2026-6354 / CVE-2026-78662, GO-2026-6355 / CVE-2026-56855), reachable through the frps SSH tunnel gateway in pkg/ssh. v0.55.0 fixes GO-2026-6303 / CVE-2026-56854. v0.56.0 requires Go 1.26, so the go directive, CI and Docker builders move from 1.25 to 1.26; Go 1.25 stopped receiving security fixes when Go 1.27 was released. Also bumps github.com/Azure/go-ntlmssp to v0.1.1 (GO-2026-5543 / CVE-2026-32952). Claude-Session: https://claude.ai/code/session_01FV4GkYDtbatepp2KH3s247 Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
32 lines
774 B
YAML
32 lines
774 B
YAML
name: golangci-lint
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
- dev
|
|
pull_request:
|
|
permissions:
|
|
contents: read
|
|
# Optional: allow read access to pull request. Use with `only-new-issues` option.
|
|
pull-requests: read
|
|
jobs:
|
|
golangci:
|
|
name: lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: actions/setup-go@v6
|
|
with:
|
|
go-version: '1.26'
|
|
cache: false
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: '22'
|
|
- name: Test and build web assets
|
|
run: make web-ci
|
|
- name: golangci-lint
|
|
uses: golangci/golangci-lint-action@v9
|
|
with:
|
|
# Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
|
|
version: v2.12.2
|