From 0eb99d24d2c54b9ade957a8c60efbb8ab9c7523c Mon Sep 17 00:00:00 2001 From: D Date: Thu, 12 Oct 2023 09:24:35 +0100 Subject: [PATCH] Update go.mod to force golang.org/x/net to latest Bumping version and ensuring latest golang.org/x/net as the HTTP rapid reset is triggering primitive vuln scanners, we do not implement a HTTP2 server and are not vulnerable but a minor bump can still help reduce noise for those searching for what they need to upgrade and patch. --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 9712d70..ae5a30f 100644 --- a/go.mod +++ b/go.mod @@ -13,4 +13,4 @@ require ( github.com/gorilla/css v1.0.0 // indirect ) -retract [v1.0.0, v1.0.24] // Retract older versions as only latest is to be depended upon +retract [v1.0.0, v1.0.25] // Retract older versions as only latest is to be depended upon