Skip to content

go.mod: update vulnerable AWS SDK dependencies - #165

Merged
creachadair merged 1 commit into
mainfrom
mjf/updep
Jul 7, 2026
Merged

go.mod: update vulnerable AWS SDK dependencies#165
creachadair merged 1 commit into
mainfrom
mjf/updep

Conversation

@creachadair

Copy link
Copy Markdown
Member

Per:

go get \
  github.com/aws/aws-sdk-go-v2 \
  github.com/aws/aws-sdk-go-v2/config \
  github.com/aws/aws-sdk-go-v2/credentials \
  github.com/aws/aws-sdk-go-v2/service/s3 \
  github.com/aws/aws-sdk-go-v2/service/sts
go mod tidy

As far as I can tell our usage is unaffected by these vulnerabilities, but this
should silence the complaints from the security scanner.

Per:

    go get \
      github.com/aws/aws-sdk-go-v2 \
      github.com/aws/aws-sdk-go-v2/config \
      github.com/aws/aws-sdk-go-v2/credentials \
      github.com/aws/aws-sdk-go-v2/service/s3 \
      github.com/aws/aws-sdk-go-v2/service/sts
    go mod tidy

As far as I can tell our usage is unaffected by these vulnerabilities, but this
should silence the complaints from the security scanner.
@creachadair
creachadair merged commit f95fcfa into main Jul 7, 2026
1 check passed
@creachadair
creachadair deleted the mjf/updep branch July 7, 2026 22:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants