From dd86bc0a5e34b5379444fa8bbabac1fb191c7244 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 10 Oct 2026 23:30:00 +0000 Subject: [PATCH 1/4] fix(deps): update module golang.org/x/crypto to v0.58.0 --- go.mod | 4 ++-- go.sum | 4 ++++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index 3137a266..b39e38b3 100644 --- a/go.mod +++ b/go.mod @@ -7,9 +7,9 @@ require ( github.com/creack/pty v1.1.24 github.com/google/uuid v1.6.0 github.com/robfig/cron/v3 v3.0.1 - golang.org/x/crypto v0.57.0 + golang.org/x/crypto v0.58.0 golang.org/x/mod v0.41.0 - golang.org/x/sys v0.48.0 + golang.org/x/sys v0.49.0 gopkg.in/yaml.v3 v3.0.1 modernc.org/sqlite v1.60.1 ) diff --git a/go.sum b/go.sum index 230b8772..005ea413 100644 --- a/go.sum +++ b/go.sum @@ -38,6 +38,8 @@ github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs= github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro= golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M= golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA= +golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= +golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c= golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o= golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= @@ -46,6 +48,8 @@ golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk= golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0= golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA= +golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI= golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E= golang.org/x/tools v0.50.0 h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU= From 630c09cdb3046221c09f593affe197d59927ff94 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 11 Oct 2026 04:48:28 +0000 Subject: [PATCH 2/4] fix(deps): update module golang.org/x/mod to v0.42.0 --- go.mod | 2 +- go.sum | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/go.mod b/go.mod index b39e38b3..9cc3e364 100644 --- a/go.mod +++ b/go.mod @@ -8,7 +8,7 @@ require ( github.com/google/uuid v1.6.0 github.com/robfig/cron/v3 v3.0.1 golang.org/x/crypto v0.58.0 - golang.org/x/mod v0.41.0 + golang.org/x/mod v0.42.0 golang.org/x/sys v0.49.0 gopkg.in/yaml.v3 v3.0.1 modernc.org/sqlite v1.60.1 diff --git a/go.sum b/go.sum index 005ea413..07a15caa 100644 --- a/go.sum +++ b/go.sum @@ -42,6 +42,8 @@ golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c= golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o= +golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg= +golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs= golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk= From cff430261a63559371f79c3022a752bdc6df2e53 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 11 Oct 2026 04:56:17 +0000 Subject: [PATCH 3/4] chore(deps): update module golang.org/x/vuln to v1.9.0 --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 387a2598..a2d5edf9 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,7 @@ VERSION ?= dev GO_LDFLAGS ?= -s -w -X main.version=$(VERSION) GOLANGCI_LINT_VERSION ?= $(shell sed -n '1p' .golangci-lint-version) -GOVULNCHECK_VERSION ?= v1.8.0 +GOVULNCHECK_VERSION ?= v1.9.0 # CI supplies the pull request base (or the previous push revision). Local # callers can override this with GOLANGCI_LINT_BASE=...; when it is absent or # unavailable, fall back to the first parent so a detached checkout remains From c6d323e95a83998afc5f87c9511f4ee8ae4121b4 Mon Sep 17 00:00:00 2001 From: crypt0rr <57799908+crypt0rr@users.noreply.github.com> Date: Sun, 11 Oct 2026 06:59:01 +0200 Subject: [PATCH 4/4] fix: update Landlock ruleset field name --- internal/sandbox/landlock_linux.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/sandbox/landlock_linux.go b/internal/sandbox/landlock_linux.go index 46722f9d..73329fc9 100644 --- a/internal/sandbox/landlock_linux.go +++ b/internal/sandbox/landlock_linux.go @@ -306,7 +306,7 @@ func restrictSelf(paths []landlockPath, inherited []int) error { // createRuleset creates a ruleset that handles every right and scope ABI abi // restricts. func createRuleset(abi int) (int, error) { - attr := unix.LandlockRulesetAttr{Access_fs: handledAccess(abi), Scoped: handledScopes(abi)} + attr := unix.LandlockRulesetAttr{Handled_access_fs: handledAccess(abi), Scoped: handledScopes(abi)} fd, _, errno := unix.Syscall(unix.SYS_LANDLOCK_CREATE_RULESET, uintptr(unsafe.Pointer(&attr)), unsafe.Sizeof(attr), 0) if errno != 0 { return -1, fmt.Errorf("create the Landlock ruleset: %w", errno)