TheAfriForge/gitforge
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2026-07-18 23:47:50 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update module github.com/yuin/goldmark to v1.7.17 [SECURITY] (v11.0/forgejo) (#13352)

Browse source 
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `v1.7.13` → `v1.7.17` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fyuin%2fgoldmark/v1.7.17?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fyuin%2fgoldmark/v1.7.13/v1.7.17?slim=true) |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2779) for more information.

---

### Cross-site Scripting (XSS) in github.com/yuin/goldmark
[CVE-2026-5160](https://nvd.nist.gov/vuln/detail/CVE-2026-5160) / [GHSA-c97m-vxhj-p7j6](https://github.com/advisories/GHSA-c97m-vxhj-p7j6) / [GO-2026-5320](https://pkg.go.dev/vuln/GO-2026-5320)

<details>
<summary>More information</summary>

#### Details
Cross-site Scripting (XSS) in github.com/yuin/goldmark

#### Severity
Unknown

#### References
- [https://github.com/advisories/GHSA-c97m-vxhj-p7j6](https://github.com/advisories/GHSA-c97m-vxhj-p7j6)
- [cb46bbc4ec)
- [https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMYUINGOLDMARKRENDERERHTML-15838406](https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMYUINGOLDMARKRENDERERHTML-15838406)

This data is provided by [OSV](https://osv.dev/vulnerability/GO-2026-5320) and the [Go Vulnerability Database](https://github.com/golang/vulndb) ([CC-BY 4.0](https://github.com/golang/vulndb#license)).
</details>

---

### Release Notes

<details>
<summary>yuin/goldmark (github.com/yuin/goldmark)</summary>

### [`v1.7.17`](https://github.com/yuin/goldmark/releases/tag/v1.7.17): release

[Compare Source](https://github.com/yuin/goldmark/compare/v1.7.16...v1.7.17)

**Full Changelog**: <https://github.com/yuin/goldmark/compare/v1.7.16...v1.7.17>

### [`v1.7.16`](https://github.com/yuin/goldmark/releases/tag/v1.7.16): release

[Compare Source](https://github.com/yuin/goldmark/compare/v1.7.15...v1.7.16)

### [`v1.7.15`](https://github.com/yuin/goldmark/releases/tag/v1.7.15): release

[Compare Source](https://github.com/yuin/goldmark/compare/v1.7.14...v1.7.15)

### [`v1.7.14`](https://github.com/yuin/goldmark/releases/tag/v1.7.14): release

[Compare Source](https://github.com/yuin/goldmark/compare/v1.7.13...v1.7.14)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1Mi4xIiwidGFyZ2V0QnJhbmNoIjoidjExLjAvZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13352
Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org>
This commit is contained in:
Renovate Bot 2026-07-08 20:58:20 +02:00 • committed by Mathieu Fenniak
commit 3c70896165
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
go.mod
View file

@ -96,7 +96,7 @@ require (
github.com/urfave/cli/v2 v2.27.6
github.com/valyala/fastjson v1.6.4
github.com/yohcop/openid-go v1.0.1
github.com/yuin/goldmark v1.7.13
github.com/yuin/goldmark v1.7.17
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
gitlab.com/gitlab-org/api/client-go v0.126.0
go.uber.org/mock v0.5.0

4
go.sum
View file

@ -621,8 +621,8 @@ github.com/yohcop/openid-go v1.0.1/go.mod h1:b/AvD03P0KHj4yuihb+VtLD6bYYgsy0zqBz
github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
github.com/yuin/goldmark v1.4.15/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
github.com/yuin/goldmark v1.7.13 h1:GPddIs617DnBLFFVJFgpo1aBfe/4xcvMc3SB5t/D0pA=
github.com/yuin/goldmark v1.7.13/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg=
github.com/yuin/goldmark v1.7.17 h1:p36OVWwRb246iHxA/U4p8OPEpOTESm4n+g+8t0EE5uA=
github.com/yuin/goldmark v1.7.17/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg=
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc h1:+IAOyRda+RLrxa1WC7umKOZRsGq4QrFFMYApOeHzQwQ=
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc/go.mod h1:ovIvrum6DQJA4QsJSovrkC4saKHQVs7TvcaeO8AIl5I=
github.com/zeebo/assert v1.3.0 h1:g7C04CbJuIDKNPFHmsk4hwZDO5O+kntRxzaUoNXj+IQ=