detached 18c86d4

Merge branch 'main' into fix/security-hardening

commit
18c86d4d9232ff6741ee57664f385161f78a5793
author
brice · · 2026-03-15 06:40 UTC
merge of
edd6de6 + 240ae02 · diff against the first parent
signature
unsigned
2 files · +47 -47
M go.mod +15 -15
@@ -17,14 +17,14 @@ require (
1717 github.com/spf13/cobra v1.10.2
1818 github.com/spf13/viper v1.21.0
1919 github.com/stretchr/testify v1.11.1
20- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.16.0
21- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0
20+ go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.18.0
21+ go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.42.0
2222 go.opentelemetry.io/otel/sdk v1.42.0
2323 go.opentelemetry.io/otel/sdk/log v0.18.0
2424 go.opentelemetry.io/otel/sdk/metric v1.42.0
25- golang.org/x/crypto v0.48.0
25+ golang.org/x/crypto v0.49.0
2626 golang.org/x/mod v0.33.0
27- golang.org/x/term v0.40.0
27+ golang.org/x/term v0.41.0
2828 gopkg.in/natefinch/lumberjack.v2 v2.2.1
2929 )
3030
@@ -44,7 +44,7 @@ require (
4444 github.com/docker/cli v29.2.1+incompatible // indirect
4545 github.com/docker/docker-credential-helpers v0.9.3 // indirect
4646 github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
47- github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect
47+ github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect
4848 github.com/klauspost/compress v1.18.4 // indirect
4949 github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
5050 github.com/mattn/go-localereader v0.0.1 // indirect
@@ -57,15 +57,15 @@ require (
5757 github.com/sirupsen/logrus v1.9.3 // indirect
5858 github.com/vbatts/tar-split v0.12.2 // indirect
5959 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
60- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
60+ go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 // indirect
6161 go.opentelemetry.io/otel/log v0.18.0 // indirect
6262 go.opentelemetry.io/proto/otlp v1.9.0 // indirect
6363 go.yaml.in/yaml/v3 v3.0.4 // indirect
64- golang.org/x/net v0.49.0 // indirect
65- golang.org/x/sync v0.19.0 // indirect
66- google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
67- google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 // indirect
68- google.golang.org/grpc v1.78.0 // indirect
64+ golang.org/x/net v0.51.0 // indirect
65+ golang.org/x/sync v0.20.0 // indirect
66+ google.golang.org/genproto/googleapis/api v0.0.0-20260209200024-4cfbd4190f57 // indirect
67+ google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 // indirect
68+ google.golang.org/grpc v1.79.2 // indirect
6969 google.golang.org/protobuf v1.36.11 // indirect
7070 )
7171
@@ -103,13 +103,13 @@ require (
103103 github.com/spf13/pflag v1.0.10 // indirect
104104 github.com/subosito/gotenv v1.6.0 // indirect
105105 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
106- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0
106+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
107107 go.opentelemetry.io/otel v1.42.0
108- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0
108+ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.42.0
109109 go.opentelemetry.io/otel/metric v1.42.0
110110 go.opentelemetry.io/otel/trace v1.42.0
111- golang.org/x/sys v0.41.0 // indirect
112- golang.org/x/text v0.34.0 // indirect
111+ golang.org/x/sys v0.42.0 // indirect
112+ golang.org/x/text v0.35.0 // indirect
113113 gopkg.in/yaml.v3 v3.0.1 // indirect
114114 gotest.tools/v3 v3.5.2 // indirect
115115 )
@@ -17,14 +17,14 @@ require (
17 github.com/spf13/cobra v1.10.217 github.com/spf13/cobra v1.10.2
18 github.com/spf13/viper v1.21.018 github.com/spf13/viper v1.21.0
19 github.com/stretchr/testify v1.11.119 github.com/stretchr/testify v1.11.1
20- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.16.020+ go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.18.0
21- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.021+ go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.42.0
22 go.opentelemetry.io/otel/sdk v1.42.022 go.opentelemetry.io/otel/sdk v1.42.0
23 go.opentelemetry.io/otel/sdk/log v0.18.023 go.opentelemetry.io/otel/sdk/log v0.18.0
24 go.opentelemetry.io/otel/sdk/metric v1.42.024 go.opentelemetry.io/otel/sdk/metric v1.42.0
25- golang.org/x/crypto v0.48.025+ golang.org/x/crypto v0.49.0
26 golang.org/x/mod v0.33.026 golang.org/x/mod v0.33.0
27- golang.org/x/term v0.40.027+ golang.org/x/term v0.41.0
28 gopkg.in/natefinch/lumberjack.v2 v2.2.128 gopkg.in/natefinch/lumberjack.v2 v2.2.1
29 )29 )
30 30
@@ -44,7 +44,7 @@ require (
44 github.com/docker/cli v29.2.1+incompatible // indirect44 github.com/docker/cli v29.2.1+incompatible // indirect
45 github.com/docker/docker-credential-helpers v0.9.3 // indirect45 github.com/docker/docker-credential-helpers v0.9.3 // indirect
46 github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect46 github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
47- github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect47+ github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect
48 github.com/klauspost/compress v1.18.4 // indirect48 github.com/klauspost/compress v1.18.4 // indirect
49 github.com/lucasb-eyer/go-colorful v1.3.0 // indirect49 github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
50 github.com/mattn/go-localereader v0.0.1 // indirect50 github.com/mattn/go-localereader v0.0.1 // indirect
@@ -57,15 +57,15 @@ require (
57 github.com/sirupsen/logrus v1.9.3 // indirect57 github.com/sirupsen/logrus v1.9.3 // indirect
58 github.com/vbatts/tar-split v0.12.2 // indirect58 github.com/vbatts/tar-split v0.12.2 // indirect
59 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect59 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
60- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect60+ go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 // indirect
61 go.opentelemetry.io/otel/log v0.18.0 // indirect61 go.opentelemetry.io/otel/log v0.18.0 // indirect
62 go.opentelemetry.io/proto/otlp v1.9.0 // indirect62 go.opentelemetry.io/proto/otlp v1.9.0 // indirect
63 go.yaml.in/yaml/v3 v3.0.4 // indirect63 go.yaml.in/yaml/v3 v3.0.4 // indirect
64- golang.org/x/net v0.49.0 // indirect64+ golang.org/x/net v0.51.0 // indirect
65- golang.org/x/sync v0.19.0 // indirect65+ golang.org/x/sync v0.20.0 // indirect
66- google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect66+ google.golang.org/genproto/googleapis/api v0.0.0-20260209200024-4cfbd4190f57 // indirect
67- google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 // indirect67+ google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 // indirect
68- google.golang.org/grpc v1.78.0 // indirect68+ google.golang.org/grpc v1.79.2 // indirect
69 google.golang.org/protobuf v1.36.11 // indirect69 google.golang.org/protobuf v1.36.11 // indirect
70 )70 )
71 71
@@ -103,13 +103,13 @@ require (
103 github.com/spf13/pflag v1.0.10 // indirect103 github.com/spf13/pflag v1.0.10 // indirect
104 github.com/subosito/gotenv v1.6.0 // indirect104 github.com/subosito/gotenv v1.6.0 // indirect
105 go.opentelemetry.io/auto/sdk v1.2.1 // indirect105 go.opentelemetry.io/auto/sdk v1.2.1 // indirect
106- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0106+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
107 go.opentelemetry.io/otel v1.42.0107 go.opentelemetry.io/otel v1.42.0
108- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0108+ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.42.0
109 go.opentelemetry.io/otel/metric v1.42.0109 go.opentelemetry.io/otel/metric v1.42.0
110 go.opentelemetry.io/otel/trace v1.42.0110 go.opentelemetry.io/otel/trace v1.42.0
111- golang.org/x/sys v0.41.0 // indirect111+ golang.org/x/sys v0.42.0 // indirect
112- golang.org/x/text v0.34.0 // indirect112+ golang.org/x/text v0.35.0 // indirect
113 gopkg.in/yaml.v3 v3.0.1 // indirect113 gopkg.in/yaml.v3 v3.0.1 // indirect
114 gotest.tools/v3 v3.5.2 // indirect114 gotest.tools/v3 v3.5.2 // indirect
115 )115 )
M go.sum +32 -32 generated file: collapsed

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close