mirror of
https://github.com/fatedier/frp.git
synced 2026-10-15 03:45:57 +08:00
f8be1cdfe2
x/crypto v0.56.0 fixes two denial-of-service bugs in golang.org/x/crypto/ssh channel handling (GO-2026-6354 / CVE-2026-78662, GO-2026-6355 / CVE-2026-56855), reachable through the frps SSH tunnel gateway in pkg/ssh. v0.55.0 fixes GO-2026-6303 / CVE-2026-56854. v0.56.0 requires Go 1.26, so the go directive, CI and Docker builders move from 1.25 to 1.26; Go 1.25 stopped receiving security fixes when Go 1.27 was released. Also bumps github.com/Azure/go-ntlmssp to v0.1.1 (GO-2026-5543 / CVE-2026-32952). Claude-Session: https://claude.ai/code/session_01FV4GkYDtbatepp2KH3s247 Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
39 lines
875 B
YAML
39 lines
875 B
YAML
name: goreleaser
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
goreleaser:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v6
|
|
with:
|
|
go-version: '1.26'
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: '22'
|
|
- name: Build web assets (frps)
|
|
run: make build
|
|
working-directory: web/frps
|
|
- name: Build web assets (frpc)
|
|
run: make build
|
|
working-directory: web/frpc
|
|
- name: Make All
|
|
run: |
|
|
./package.sh
|
|
|
|
- name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@v7
|
|
with:
|
|
version: latest
|
|
args: release --clean --release-notes=./Release.md
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GPR_TOKEN }}
|