Update filippo.io/edwards25519 to 1.2.0 Somehow, despite disabling PRs on our GitHub mirror, GitHub's Dependabot managed to open a PR on our mirror, which does not take PRs, but the URL cannot be resolved because PRs do not exist on that repo. It's complaining about https://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr. This is a GitHub false positive because we do not use MultiScalarMult. Indeed we're not a Go library at all. All our Go code is test-only. Still, silence all this by updating. Change-Id: Ib87ce6cccc1f44642d141537a9abdbac0db1d727 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/89747 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Lily Chen <chlily@google.com> Commit-Queue: Lily Chen <chlily@google.com> Auto-Submit: David Benjamin <davidben@google.com>
diff --git a/go.mod b/go.mod index 4cb679d..8d0e6cd 100644 --- a/go.mod +++ b/go.mod
@@ -6,7 +6,7 @@ require ( cloud.google.com/go/storage v1.59.2 - filippo.io/edwards25519 v1.1.0 + filippo.io/edwards25519 v1.2.0 github.com/hexops/gotextdiff v1.0.3 golang.org/x/crypto v0.43.0 golang.org/x/net v0.46.0
diff --git a/go.sum b/go.sum index 00a9201..8877b88 100644 --- a/go.sum +++ b/go.sum
@@ -20,8 +20,8 @@ cloud.google.com/go/storage v1.59.2/go.mod h1:cMWbtM+anpC74gn6qjLh+exqYcfmB9Hqe5z6adx+CLI= cloud.google.com/go/trace v1.11.6 h1:2O2zjPzqPYAHrn3OKl029qlqG6W8ZdYaOWRyr8NgMT4= cloud.google.com/go/trace v1.11.6/go.mod h1:GA855OeDEBiBMzcckLPE2kDunIpC72N+Pq8WFieFjnI= -filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= -filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= +filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo= +filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc= github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 h1:UQUsRi8WTzhZntp5313l+CHIAT95ojUI2lpP/ExlZa4= github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0/go.mod h1:Cz6ft6Dkn3Et6l2v2a9/RpN7epQ1GtDlO6lj8bEcOvw= github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0 h1:lhhYARPUu3LmHysQ/igznQphfzynnqI3D75oUyw1HXk=