Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump golang.org/x/sys from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0 #1101

Merged
merged 1 commit into from
Dec 9, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2023

Bumps golang.org/x/sys from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 25, 2023
@codecov-commenter
Copy link

Codecov Report

Merging #1101 (e672bc9) into develop (d0fe246) will increase coverage by 0.01%.
The diff coverage is n/a.

❗ Current head e672bc9 differs from pull request most recent head 7dd4270. Consider uploading reports for the commit 7dd4270 to get more accurate results

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@             Coverage Diff             @@
##           develop    #1101      +/-   ##
===========================================
+ Coverage    54.39%   54.41%   +0.01%     
===========================================
  Files          302      302              
  Lines        26698    26698              
===========================================
+ Hits         14522    14527       +5     
+ Misses       10512    10508       -4     
+ Partials      1664     1663       -1     
Impacted Files Coverage Δ
bfe_spdy/server_conn.go 78.53% <0.00%> (-0.45%) ⬇️
bfe_spdy/frame_write.go 50.50% <0.00%> (+1.01%) ⬆️
bfe_websocket/server_conn.go 78.03% <0.00%> (+3.78%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@iyangsj iyangsj merged commit 1c4a923 into develop Dec 9, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/golang.org/x/sys-0.1.0 branch December 9, 2023 14:49
clarinette9 pushed a commit that referenced this pull request Dec 29, 2024
Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>
clarinette9 pushed a commit that referenced this pull request Jan 19, 2025
Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>
clarinette9 added a commit that referenced this pull request Jan 19, 2025
* typo: fix docs/example markdown lint

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: code span on function prototype of bfe callback

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/introduction markdown lint and syntax

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/installation markdown lint and syntax

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/faq markdown lint and syntax

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/modules markdown lint

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/operation markdown lint

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/monitor markdown lint and syntax

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Add en_us/condition/request/context.md

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Add zh_cn/condition/request/context.md

Signed-off-by: Song Jian <songjian@yf-networks.com>

* add req_context_value_in() to condition_primitive_index.md and adjust sequence (#1010)

Signed-off-by: Song Jian <songjian@yf-networks.com>

* ci: add markdown lint action

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix docs/condition markdown lints

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Revert "chore: add typos in pre-commit"

Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_balance spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_basic BOM

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_config spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_fcgi spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_http bfe_server spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_http2 spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_module spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: format bfe_modules/mod_userid

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_route spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_spdy spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: fix bfe_tls spelling

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: format bfe_util/socket_util

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* chore: ignore log rotate files

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* typo: remove dot at the end

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Fix typo in  mod_geo (#1029)

Signed-off-by: suhang <1099811329@qq.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Add staticcheck pre-commit hook (#1019)

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Add precommit hook for markdownlint (#1038)

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Evict the oldest conn when the conn pool exceeds its limit (#1044)

Signed-off-by: chenchen.ccqy66 <chenchen.ccqy66@bytedance.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* import code-lint workflow job (#1037)

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix go.yaml dependency

Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix arm build error in golang1.18

Signed-off-by: Song Jian <songjian@yf-networks.com>

* refactor: replace strings.Replace with strings.ReplaceAll

strings.ReplaceAll(s, old, new) is a wrapper function for
strings.Replace(s, old, new, -1). But strings.ReplaceAll is more
readable and removes the hardcoded -1.

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Create some slices with enough capacity (#1054)

Signed-off-by: chenchen.ccqy66 <chenchen.ccqy66@bytedance.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update ci.yml (#1061)

Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix build failed on macos (#1067)

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Make some optimization for leastConnsBalance (#1062)

Signed-off-by: likepeng <likepeng@didiglobal.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Fix some unreachable code in unit tests (#1068)

Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Support HTTP/2 fingerprint (#1072)

Signed-off-by: xqbumu <xqbumu@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* update v1.6.0 changelog

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* update changelog and version file

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update CHANGELOG.md

fix minor typo

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update condition_grammar.md

fix typos

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update README.md

Signed-off-by: Song Jian <songjian@yf-networks.com>

* update mkdocs yml and download link for v1.5 and v1.6 (#1084)

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Resolved #800 support test configuration

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update MAINTAINERS.md

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update MAINTAINERS.md

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* update maintainers.md

Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix some typo (#1113)

Signed-off-by: cui fliter <imcusg@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update ci.yml

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update ADOPTERS.md (#1123)

Signed-off-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* build(deps): bump golang.org/x/sys (#1101)

Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* remove TestSetKeepAlive

Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* remove TestSetKeepAlive

Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Resubmit with Signed-off-by line

Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Resubmit with Signed-off-by line

Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* http2: close connections when receiving too many headers (#1156)

Maintaining HPACK state requires that we parse and process all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, we don't allocate memory to store the excess headers but we do parse them. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send.

Set a limit on the amount of excess header frames we will process before closing a connection.

This is CVE-2023-45288 and Go issue https://go.dev/issue/65051.

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update Dockerfile to support multiarch build (#1120)

Replace go compile args to TARGETOS and TARGETARCH to support multiarch compile

Signed-off-by: Allen Chen <watchword@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Fix format issue in bfe_http/request_test.go (#1163)

Signed-off-by: cuishuang <imcusg@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* Temporarily remove some test cases using legacy test data (#1193)

Signed-off-by: Song Jian <songjian@yf-networks.com>

* The experimental `dynamic plugin` is deprecated (#1197)

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Update versions of some thirdpaty modules (#1198)

Fix broken unit tests

Signed-off-by: Song Jian <songjian@yf-networks.com>

* Upgrade third-party modules for security reasons (#1201)

Remove duplicated code lint workflow

Signed-off-by: Sijie Yang <iyangsj@gmail.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* bfe_wasm

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* remove v2

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* remove redundant codes

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix OnPluginStart

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* refine codes

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix.

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix nil

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* rename package & remove some obsolete lines.

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* refine

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix & refine

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* docs of mod_wasmplugin

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* add link in summary.md to mod_wasmplugin

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* fix "bfe_http : readloop goroutine leak #1209"

Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>

* update changlog and version file for v1.7.0

Signed-off-by: Song Jian <songjian@yf-networks.com>

---------

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>
Signed-off-by: suhang <1099811329@qq.com>
Signed-off-by: chenchen.ccqy66 <chenchen.ccqy66@bytedance.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: likepeng <likepeng@didiglobal.com>
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Signed-off-by: xqbumu <xqbumu@163.com>
Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: cui fliter <imcusg@gmail.com>
Signed-off-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Allen Chen <watchword@gmail.com>
Signed-off-by: cuishuang <imcusg@gmail.com>
Signed-off-by: Sijie Yang <iyangsj@gmail.com>
Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: kwanhur <huang_hua2012@163.com>
Co-authored-by: Sijie Yang <iyangsj@gmail.com>
Co-authored-by: Miles Zhang <zhangmiao02@baidu.com>
Co-authored-by: blinkbean <1099811329@qq.com>
Co-authored-by: wolfCoder <chenchen_839@126.com>
Co-authored-by: daimg <daiming@baidu.com>
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>
Co-authored-by: kezhenxu94 <kezhenxu94@apache.org>
Co-authored-by: supermario1990 <406517780@qq.com>
Co-authored-by: cooper-li <963492628@qq.com>
Co-authored-by: Abirdcfly <fp544037857@gmail.com>
Co-authored-by: 卜木 <xqbumu@gmail.com>
Co-authored-by: cui fliter <imcusg@gmail.com>
Co-authored-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: liangchuan <liangchuan@yf-networks.com>
Co-authored-by: z8n24 <zhaoxueqin24@Gmail.com>
Co-authored-by: watchword <watchword@gmail.com>
Co-authored-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: Song Jian <songjian@yf-networks.com>
clarinette9 added a commit that referenced this pull request Jan 19, 2025
* typo: fix docs/example markdown lint




* typo: code span on function prototype of bfe callback




* typo: fix docs/introduction markdown lint and syntax




* typo: fix docs/installation markdown lint and syntax




* typo: fix docs/faq markdown lint and syntax




* typo: fix docs/modules markdown lint




* typo: fix docs/operation markdown lint




* typo: fix docs/monitor markdown lint and syntax




* Add en_us/condition/request/context.md



* Add zh_cn/condition/request/context.md



* add req_context_value_in() to condition_primitive_index.md and adjust sequence (#1010)



* ci: add markdown lint action




* typo: fix docs/condition markdown lints




* Revert "chore: add typos in pre-commit"



* typo: fix bfe_balance spelling




* typo: fix bfe_basic BOM




* typo: fix bfe_config spelling




* typo: fix bfe_fcgi spelling




* typo: fix bfe_http bfe_server spelling




* typo: fix bfe_http2 spelling




* typo: fix bfe_module spelling




* typo: format bfe_modules/mod_userid




* typo: fix bfe_route spelling




* typo: fix bfe_spdy spelling




* typo: fix bfe_tls spelling




* typo: format bfe_util/socket_util




* chore: ignore log rotate files




* typo: remove dot at the end




* Fix typo in  mod_geo (#1029)




* Add staticcheck pre-commit hook (#1019)




* Add precommit hook for markdownlint (#1038)




* Evict the oldest conn when the conn pool exceeds its limit (#1044)




* import code-lint workflow job (#1037)




* fix go.yaml dependency



* fix arm build error in golang1.18



* refactor: replace strings.Replace with strings.ReplaceAll

strings.ReplaceAll(s, old, new) is a wrapper function for
strings.Replace(s, old, new, -1). But strings.ReplaceAll is more
readable and removes the hardcoded -1.




* Create some slices with enough capacity (#1054)




* Update ci.yml (#1061)



* fix build failed on macos (#1067)



* Make some optimization for leastConnsBalance (#1062)




* Fix some unreachable code in unit tests (#1068)




* Support HTTP/2 fingerprint (#1072)




* update v1.6.0 changelog




* update changelog and version file




* Update CHANGELOG.md

fix minor typo




* Update condition_grammar.md

fix typos



* Update README.md



* update mkdocs yml and download link for v1.5 and v1.6 (#1084)




* Resolved #800 support test configuration




* Update MAINTAINERS.md




* Update MAINTAINERS.md




* update maintainers.md




* fix some typo (#1113)




* Update ci.yml



* Update ADOPTERS.md (#1123)




* build(deps): bump golang.org/x/sys (#1101)

Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...





* remove TestSetKeepAlive




* remove TestSetKeepAlive




* Resubmit with Signed-off-by line




* Resubmit with Signed-off-by line




* http2: close connections when receiving too many headers (#1156)

Maintaining HPACK state requires that we parse and process all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, we don't allocate memory to store the excess headers but we do parse them. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send.

Set a limit on the amount of excess header frames we will process before closing a connection.

This is CVE-2023-45288 and Go issue https://go.dev/issue/65051.



* Update Dockerfile to support multiarch build (#1120)

Replace go compile args to TARGETOS and TARGETARCH to support multiarch compile




* Fix format issue in bfe_http/request_test.go (#1163)




* Temporarily remove some test cases using legacy test data (#1193)



* The experimental `dynamic plugin` is deprecated (#1197)



* Update versions of some thirdpaty modules (#1198)

Fix broken unit tests



* Upgrade third-party modules for security reasons (#1201)

Remove duplicated code lint workflow




* bfe_wasm




* remove v2




* remove redundant codes




* fix OnPluginStart




* refine codes




* fix.




* fix nil




* rename package & remove some obsolete lines.




* refine




* fix & refine




* docs of mod_wasmplugin




* add link in summary.md to mod_wasmplugin




* fix "bfe_http : readloop goroutine leak #1209"




* update changlog and version file for v1.7.0



---------

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>
Signed-off-by: suhang <1099811329@qq.com>
Signed-off-by: chenchen.ccqy66 <chenchen.ccqy66@bytedance.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: likepeng <likepeng@didiglobal.com>
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Signed-off-by: xqbumu <xqbumu@163.com>
Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: cui fliter <imcusg@gmail.com>
Signed-off-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Allen Chen <watchword@gmail.com>
Signed-off-by: cuishuang <imcusg@gmail.com>
Signed-off-by: Sijie Yang <iyangsj@gmail.com>
Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: kwanhur <huang_hua2012@163.com>
Co-authored-by: Sijie Yang <iyangsj@gmail.com>
Co-authored-by: Miles Zhang <zhangmiao02@baidu.com>
Co-authored-by: blinkbean <1099811329@qq.com>
Co-authored-by: wolfCoder <chenchen_839@126.com>
Co-authored-by: daimg <daiming@baidu.com>
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>
Co-authored-by: kezhenxu94 <kezhenxu94@apache.org>
Co-authored-by: supermario1990 <406517780@qq.com>
Co-authored-by: cooper-li <963492628@qq.com>
Co-authored-by: Abirdcfly <fp544037857@gmail.com>
Co-authored-by: 卜木 <xqbumu@gmail.com>
Co-authored-by: cui fliter <imcusg@gmail.com>
Co-authored-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: liangchuan <liangchuan@yf-networks.com>
Co-authored-by: z8n24 <zhaoxueqin24@Gmail.com>
Co-authored-by: watchword <watchword@gmail.com>
Co-authored-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: Song Jian <songjian@yf-networks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants