mirror of
https://github.com/hexolan/stocklet.git
synced 2026-03-26 03:31:18 +00:00
Declan Teevan
4a686228e1
Prior to patch, occuring/reproducable when gRPC service is directly exposed (not behind a reverse proxy / load balancer that enforces HTTP/2 compliance - path normalisation). This would not present a public-facing issue within the current version of this project; no user-facing gRPC routes are made avaliable that aren't already behind `grpc-gateway` for enforcing the mappings. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
72 lines
3.1 KiB
Modula-2
72 lines
3.1 KiB
Modula-2
module github.com/hexolan/stocklet
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.31.0-20231106192134-1baebb0a1518.2
|
|
github.com/bufbuild/protovalidate-go v0.4.1
|
|
github.com/doug-martin/goqu/v9 v9.19.0
|
|
github.com/golang-migrate/migrate/v4 v4.16.2
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.18.0
|
|
github.com/jackc/pgx/v5 v5.5.4
|
|
github.com/lestrrat-go/jwx/v2 v2.0.21
|
|
github.com/rs/zerolog v1.31.0
|
|
github.com/twmb/franz-go v1.15.0
|
|
github.com/twmb/franz-go/pkg/kadm v1.9.2
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1
|
|
go.opentelemetry.io/otel v1.40.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0
|
|
go.opentelemetry.io/otel/sdk v1.40.0
|
|
golang.org/x/crypto v0.49.0
|
|
golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217
|
|
google.golang.org/grpc v1.79.3
|
|
google.golang.org/protobuf v1.36.11
|
|
)
|
|
|
|
require (
|
|
github.com/antlr4-go/antlr/v4 v4.13.0 // indirect
|
|
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect
|
|
github.com/distribution/reference v0.5.0 // indirect
|
|
github.com/docker/docker v25.0.6+incompatible // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/goccy/go-json v0.10.2 // indirect
|
|
github.com/google/cel-go v0.18.2 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/jackc/pgpassfile v1.0.0 // indirect
|
|
github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
|
|
github.com/jackc/puddle/v2 v2.2.1 // indirect
|
|
github.com/klauspost/compress v1.17.2 // indirect
|
|
github.com/lestrrat-go/blackmagic v1.0.2 // indirect
|
|
github.com/lestrrat-go/httpcc v1.0.1 // indirect
|
|
github.com/lestrrat-go/httprc v1.0.5 // indirect
|
|
github.com/lestrrat-go/iter v1.0.2 // indirect
|
|
github.com/lestrrat-go/option v1.0.1 // indirect
|
|
github.com/lib/pq v1.10.2 // indirect
|
|
github.com/mattn/go-colorable v0.1.13 // indirect
|
|
github.com/mattn/go-isatty v0.0.19 // indirect
|
|
github.com/opencontainers/image-spec v1.1.0-rc5 // indirect
|
|
github.com/pierrec/lz4/v4 v4.1.18 // indirect
|
|
github.com/segmentio/asm v1.2.0 // indirect
|
|
github.com/stoewer/go-strcase v1.3.0 // indirect
|
|
github.com/twmb/franz-go/pkg/kmsg v1.6.1 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.40.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.40.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v1.0.0 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
golang.org/x/net v0.52.0 // indirect
|
|
golang.org/x/sync v0.20.0 // indirect
|
|
golang.org/x/sys v0.42.0 // indirect
|
|
golang.org/x/text v0.35.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260319201613-d00831a3d3e7 // indirect
|
|
)
|