weichen
5a01b0e990
Why: govulncheck reported 20 module-level advisories against golang.org/x/crypto v0.37.0 (19 with upstream fixes, GO-2026-5932 unfixed); none were reachable from our code, but the whole batch clears with one routine bump — follow-up to the 2026-09-30 dependency CVE inventory. Evidence: golang.org/x/crypto v0.37.0 => v0.56.0 (x/text follows to v0.41.0 as a requirement); CGO_ENABLED=0 go build ./... and go test -count=1 ./... green against the new core types; govulncheck now reports 0 affected, 0 import-level, 1 module-level (the upstream-unfixed GO-2026-5932 — the floor until upstream ships a fix). Impact: go.mod/go.sum bumps only; no code change; x/crypto is not imported by any of our packages (transitive require). Refs: Dev-side task fix/followup-hardening (gitlink pin follows after combined verification)
52 lines
1.6 KiB
AMPL
52 lines
1.6 KiB
AMPL
module agent-system-backend
|
|
|
|
go 1.27
|
|
|
|
require (
|
|
agent-command v0.0.0
|
|
agent-intent v0.0.0
|
|
agent-native v0.0.0
|
|
agent-squad v0.0.0-00010101000000-000000000000
|
|
agent-system-core v0.0.0
|
|
github.com/jackc/pgx/v5 v5.9.2
|
|
github.com/ledongthuc/pdf v0.0.0-20260907135840-6c8c28e0e8a0
|
|
github.com/redis/go-redis/v9 v9.14.0
|
|
golang.org/x/crypto v0.56.0
|
|
modernc.org/sqlite v1.60.1
|
|
)
|
|
|
|
require (
|
|
error-code-system v0.0.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/jackc/pgpassfile v1.0.0 // indirect
|
|
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
|
|
github.com/jackc/puddle/v2 v2.2.2 // indirect
|
|
github.com/mattn/go-isatty v0.0.24 // indirect
|
|
github.com/ncruces/go-strftime v1.0.0 // indirect
|
|
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
|
|
golang.org/x/sync v0.23.0 // indirect
|
|
golang.org/x/sys v0.48.0 // indirect
|
|
golang.org/x/text v0.41.0 // indirect
|
|
logging-system v0.0.0 // indirect
|
|
modernc.org/libc v1.77.1 // indirect
|
|
modernc.org/mathutil v1.7.1 // indirect
|
|
modernc.org/memory v1.12.1 // indirect
|
|
)
|
|
|
|
replace agent-intent => ./deps/agent-intent
|
|
|
|
replace agent-squad => ./deps/agent-squad
|
|
|
|
replace agent-native => ./deps/agent-native
|
|
|
|
replace agent-system-core => ./deps/agent-system-core
|
|
|
|
replace error-code-system => ./deps/error-code-system
|
|
|
|
replace logging-system => ./deps/logging-system
|
|
|
|
replace agent-command => ./deps/agent-command
|