diff --git a/CHANGELOG.md b/CHANGELOG.md index 974172f0..d253b40a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,19 @@ but works with PostgreSQL, MySQL, and SQLite. # Changelog +## v10.15.1 + +**Important Security Update** + +This update includes a fix for a security issue, please update to this release as soon as possible. + +- Fixed issue with update query values ([#2043](https://github.com/go-pg/pg/pull/2043)) +- Bumped golang.org/x/crypto from v0.36.0 to v0.45.0 ([#2040](https://github.com/go-pg/pg/pull/2040)) ([#2037](https://github.com/go-pg/pg/pull/2037)) ([#2038](https://github.com/go-pg/pg/pull/2038)) +- Fixed x/crypto/ssh security warnings ([#2039](https://github.com/go-pg/pg/pull/2039)) +- Bumped gopkg.in/yaml.v3 from v3.0.0 to v3.0.1 ([#2035](https://github.com/go-pg/pg/pull/2035)) + +Thank you [@molzri3](https://github.com/molzri3) for reporting the security issue! + ## v10.15.0 **Important Security Update** diff --git a/extra/pgdebug/go.mod b/extra/pgdebug/go.mod index c1f1d8de..e9757dd7 100644 --- a/extra/pgdebug/go.mod +++ b/extra/pgdebug/go.mod @@ -4,7 +4,7 @@ go 1.24.0 replace github.com/go-pg/pg/v10 => ../.. -require github.com/go-pg/pg/v10 v10.15.0 +require github.com/go-pg/pg/v10 v10.15.1 require ( github.com/go-pg/zerochecker v0.2.0 // indirect diff --git a/extra/pgdebug/go.sum b/extra/pgdebug/go.sum index a3de387b..b324e231 100644 --- a/extra/pgdebug/go.sum +++ b/extra/pgdebug/go.sum @@ -56,7 +56,7 @@ gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU= gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -gopkg.in/yaml.v3 v3.0.0 h1:hjy8E9ON/egN1tAYqKb61G10WtihqetD4sz2H+8nIeA= -gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= +gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= mellium.im/sasl v0.3.1 h1:wE0LW6g7U83vhvxjC1IY8DnXM+EU095yeo8XClvCdfo= mellium.im/sasl v0.3.1/go.mod h1:xm59PUYpZHhgQ9ZqoJ5QaCqzWMi8IeS49dhp6plPCzw= diff --git a/extra/pgotel/example/go.mod b/extra/pgotel/example/go.mod index 3db2638f..a18c1075 100644 --- a/extra/pgotel/example/go.mod +++ b/extra/pgotel/example/go.mod @@ -7,8 +7,8 @@ replace github.com/go-pg/pg/v10 => ../../.. replace github.com/go-pg/pg/extra/pgotel/v10 => ../ require ( - github.com/go-pg/pg/extra/pgotel/v10 v10.15.0 - github.com/go-pg/pg/v10 v10.15.0 + github.com/go-pg/pg/extra/pgotel/v10 v10.15.1 + github.com/go-pg/pg/v10 v10.15.1 go.opentelemetry.io/otel v1.0.0 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.0.0 go.opentelemetry.io/otel/sdk v1.0.0 diff --git a/extra/pgotel/go.mod b/extra/pgotel/go.mod index c6fd913a..39e453d7 100644 --- a/extra/pgotel/go.mod +++ b/extra/pgotel/go.mod @@ -5,7 +5,7 @@ go 1.24.0 replace github.com/go-pg/pg/v10 => ../.. require ( - github.com/go-pg/pg/v10 v10.15.0 + github.com/go-pg/pg/v10 v10.15.1 go.opentelemetry.io/otel v1.0.0 go.opentelemetry.io/otel/trace v1.0.0 ) diff --git a/extra/pgotel/go.sum b/extra/pgotel/go.sum index a04e2733..741055fd 100644 --- a/extra/pgotel/go.sum +++ b/extra/pgotel/go.sum @@ -62,7 +62,7 @@ gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU= gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -gopkg.in/yaml.v3 v3.0.0 h1:hjy8E9ON/egN1tAYqKb61G10WtihqetD4sz2H+8nIeA= -gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= +gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= mellium.im/sasl v0.3.1 h1:wE0LW6g7U83vhvxjC1IY8DnXM+EU095yeo8XClvCdfo= mellium.im/sasl v0.3.1/go.mod h1:xm59PUYpZHhgQ9ZqoJ5QaCqzWMi8IeS49dhp6plPCzw= diff --git a/extra/pgsegment/go.mod b/extra/pgsegment/go.mod index 897195b3..d99edf75 100644 --- a/extra/pgsegment/go.mod +++ b/extra/pgsegment/go.mod @@ -1,13 +1,11 @@ module github.com/go-pg/pg/extra/pgsegment/v10 -go 1.23.0 - -toolchain go1.23.2 +go 1.24.0 replace github.com/go-pg/pg/v10 => ../.. require ( - github.com/go-pg/pg/v10 v10.15.0 + github.com/go-pg/pg/v10 v10.15.1 github.com/segmentio/encoding v0.2.21 ) diff --git a/version.go b/version.go index 71c9325e..6823ca68 100644 --- a/version.go +++ b/version.go @@ -2,5 +2,5 @@ package pg // Version is the current release version. func Version() string { - return "10.15.0" + return "10.15.1" }