mirror of
https://github.com/Buriburizaem0n/nezha_domains.git
synced 2026-09-19 09:40:12 +00:00
* test: TDD regression tests for GHSA-jx78-55p5-rwv5 stream quota enforcement * Apply remaining changes * fix: update action SHA allowlist and test assertions to match dependabot bump * fix: close GHSA-jx78-55p5-rwv5 incomplete fix of GHSA-qjpp-gffx-2wm9 Finding 1 (Moderate): nil-guard reporterServer in delayCheck and notifyCheck. ServerShared has its own lock independent of serviceResponseDataStoreLock, so m := ServerShared.GetList() taken inside the worker can return a nil entry for the reporter if the server was concurrently deleted. Previously this caused an unrecovered SIGSEGV in the worker goroutine (and in the gRPC layer with no recovery interceptor), taking down the whole instance. Finding 2 (Low): nil-guard ss.services[id] in ServiceSentinel.Delete(). A caller-supplied id that is absent from the registry caused ss.services[id].CronJobID to panic, aborting the Delete loop and leaving every subsequent valid id as a zombie service (DB row deleted, in-memory entry kept, cron probe still running). Regression tests added for both findings following the existing servicesentinel_lifecycle_test.go patterns. * Apply remaining changes * chore: replace commit hashes with version tags in test.yml * fix(server): serialize authoritative lifecycle changes Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai> * fix(service): bind reports to reporter lifecycle Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai> * fix(rpc): reject results from stale task streams Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai> * fix(agentcompat): allow version-tagged actions * fix(agentcompat): allow literal checkout refs * refactor(agentcompat): remove SHA resolver policy * test(agentcompat): remove resolver SHA fixtures * test(agentcompat): remove mutable ref fixtures * test(agentcompat): use tagged actions in secure fixtures * test(agentcompat): update credential fixtures for tags * test(agentcompat): update reusable action fixtures * test(agentcompat): update artifact redaction fixtures * test(agentcompat): finish artifact fixture tag migration * test(agentcompat): update workflow validation fixtures * test(agentcompat): update dependency workflow fixture * ci(agentcompat): stop pinning cross-repository revisions --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: naiba <hi@nai.ba> Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
125 lines
5.3 KiB
AMPL
125 lines
5.3 KiB
AMPL
module github.com/nezhahq/nezha
|
|
|
|
go 1.26.3
|
|
|
|
require (
|
|
github.com/VictoriaMetrics/VictoriaMetrics v1.143.0
|
|
github.com/appleboy/gin-jwt/v2 v2.10.3
|
|
github.com/dustinkirkland/golang-petname v0.0.0-20260215035315-f0c533e9ce9b
|
|
github.com/gin-contrib/pprof v1.5.4
|
|
github.com/gin-gonic/gin v1.12.0
|
|
github.com/go-viper/mapstructure/v2 v2.5.0
|
|
github.com/goccy/go-json v0.10.6
|
|
github.com/golang-jwt/jwt/v4 v4.5.2
|
|
github.com/gorilla/websocket v1.5.3
|
|
github.com/hashicorp/go-uuid v1.0.3
|
|
github.com/jinzhu/copier v0.4.0
|
|
github.com/knadh/koanf/maps v0.1.2
|
|
github.com/knadh/koanf/providers/env v1.1.0
|
|
github.com/knadh/koanf/providers/file v1.2.1
|
|
github.com/knadh/koanf/v2 v2.3.4
|
|
github.com/leonelquinteros/gotext v1.7.2
|
|
github.com/libdns/cloudflare v0.2.2
|
|
github.com/libdns/he v1.2.2
|
|
github.com/libdns/libdns v1.1.1
|
|
github.com/mattn/go-sqlite3 v1.14.44
|
|
github.com/miekg/dns v1.1.72
|
|
github.com/modelcontextprotocol/go-sdk v1.6.1
|
|
github.com/nezhahq/libdns-tencentcloud v0.0.0-20260628095405-2ab294ec675b
|
|
github.com/ory/graceful v0.2.0
|
|
github.com/oschwald/maxminddb-golang v1.13.1
|
|
github.com/patrickmn/go-cache v2.1.0+incompatible
|
|
github.com/robfig/cron/v3 v3.0.1
|
|
github.com/sqids/sqids-go v0.4.1
|
|
github.com/stretchr/testify v1.11.1
|
|
github.com/swaggo/files v1.0.1
|
|
github.com/swaggo/gin-swagger v1.6.1
|
|
github.com/tidwall/gjson v1.19.0
|
|
golang.org/x/crypto v0.52.0
|
|
golang.org/x/exp v0.0.0-20260508232706-74f9aab9d74a
|
|
golang.org/x/mod v0.36.0
|
|
golang.org/x/net v0.55.0
|
|
golang.org/x/oauth2 v0.36.0
|
|
golang.org/x/sync v0.20.0
|
|
golang.org/x/sys v0.45.0
|
|
google.golang.org/grpc v1.81.1
|
|
google.golang.org/protobuf v1.36.11
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
gorm.io/driver/sqlite v1.6.0
|
|
gorm.io/gorm v1.31.1
|
|
sigs.k8s.io/yaml v1.6.0
|
|
)
|
|
|
|
require (
|
|
github.com/KyleBanks/depth v1.2.1 // indirect
|
|
github.com/VictoriaMetrics/easyproto v1.2.0 // indirect
|
|
github.com/VictoriaMetrics/fastcache v1.13.3 // indirect
|
|
github.com/VictoriaMetrics/metrics v1.43.2 // indirect
|
|
github.com/VictoriaMetrics/metricsql v0.87.0 // indirect
|
|
github.com/bytedance/gopkg v0.1.4 // indirect
|
|
github.com/bytedance/sonic v1.15.1 // indirect
|
|
github.com/bytedance/sonic/loader v0.5.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/cloudwego/base64x v0.1.7 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/fsnotify/fsnotify v1.10.1 // indirect
|
|
github.com/gabriel-vasile/mimetype v1.4.13 // indirect
|
|
github.com/gin-contrib/sse v1.1.1 // indirect
|
|
github.com/go-openapi/jsonpointer v0.23.1 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.5 // indirect
|
|
github.com/go-openapi/spec v0.22.4 // indirect
|
|
github.com/go-openapi/swag/conv v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonname v0.26.0 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/loading v0.26.0 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.26.0 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
|
|
github.com/go-playground/locales v0.14.1 // indirect
|
|
github.com/go-playground/universal-translator v0.18.1 // indirect
|
|
github.com/go-playground/validator/v10 v10.30.2 // indirect
|
|
github.com/goccy/go-yaml v1.19.2 // indirect
|
|
github.com/golang/snappy v1.0.0 // indirect
|
|
github.com/google/jsonschema-go v0.4.3 // indirect
|
|
github.com/jinzhu/inflection v1.0.0 // indirect
|
|
github.com/jinzhu/now v1.1.5 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/klauspost/compress v1.18.6 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.3.0 // indirect
|
|
github.com/leodido/go-urn v1.4.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.22 // indirect
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/pelletier/go-toml/v2 v2.3.1 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/quic-go/qpack v0.6.0 // indirect
|
|
github.com/quic-go/quic-go v0.59.1 // indirect
|
|
github.com/rogpeppe/go-internal v1.14.1 // indirect
|
|
github.com/segmentio/asm v1.1.3 // indirect
|
|
github.com/segmentio/encoding v0.5.4 // indirect
|
|
github.com/swaggo/swag v1.16.6 // indirect
|
|
github.com/tidwall/match v1.2.0 // indirect
|
|
github.com/tidwall/pretty v1.2.1 // indirect
|
|
github.com/tidwall/sjson v1.2.5 // indirect
|
|
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
|
|
github.com/ugorji/go/codec v1.3.1 // indirect
|
|
github.com/valyala/bytebufferpool v1.0.0 // indirect
|
|
github.com/valyala/fastrand v1.1.0 // indirect
|
|
github.com/valyala/gozstd v1.24.0 // indirect
|
|
github.com/valyala/histogram v1.2.0 // indirect
|
|
github.com/valyala/quicktemplate v1.8.0 // indirect
|
|
github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
|
|
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
|
|
go.mongodb.org/mongo-driver/v2 v2.6.0 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
golang.org/x/arch v0.27.0 // indirect
|
|
golang.org/x/text v0.37.0 // indirect
|
|
golang.org/x/time v0.15.0 // indirect
|
|
golang.org/x/tools v0.45.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260511170946-3700d4141b60 // indirect
|
|
)
|