claude
353b8f5a16
govulncheck found 20 reachable advisories on 2026-08-10: 19 in the standard library and one in x/text. Go 1.25.12 closes the 19. The reachable traces that mattered are mavweb's HTML template escaping and the mavgpud proxy's TLS, both of which face the LAN. deps/ is gitignored and make deps-go builds the toolchain, so the bump is the version, its checksum and the go directive. Nothing is vendored by this commit. x/text stays at 0.14.0 (owner's call, 2026-08-11). Its one advisory is reached only through the ONNX embedder normalizing his own text, so nothing hostile arrives there, and 0.39.0 regenerates the Unicode tables for 41,385 changed lines against a 300-line pre-commit cap that exempts only markdown. The bump is worth doing when vendor/ is exempt from the guard, not before. No govulncheck make target either: it would fail on the x/text finding from the day it landed, and a gate that is red on arrival teaches people to skip it. make fmt-check, make vet, make build and make test pass on 1.25.12, 65 packages ok. The four TestONNX measurements pass in 29.6s.
32 lines
864 B
Modula-2
32 lines
864 B
Modula-2
module github.com/kami/maven
|
|
|
|
go 1.25.12
|
|
|
|
require (
|
|
github.com/coder/websocket v1.8.12
|
|
github.com/robfig/cron/v3 v3.0.1
|
|
github.com/yalue/onnxruntime_go v1.31.0
|
|
golang.org/x/sys v0.46.0
|
|
modernc.org/sqlite v1.54.0
|
|
)
|
|
|
|
require (
|
|
github.com/aaaton/golem/v4 v4.0.2
|
|
github.com/aaaton/golem/v4/dicts/ru v0.0.0-20250408131944-3488790fc110
|
|
github.com/kami/hexis v0.0.0
|
|
)
|
|
|
|
require (
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/ncruces/go-strftime v1.0.0 // indirect
|
|
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
|
|
golang.org/x/text v0.14.0
|
|
modernc.org/libc v1.74.1 // indirect
|
|
modernc.org/mathutil v1.7.1 // indirect
|
|
modernc.org/memory v1.11.0 // indirect
|
|
)
|
|
|
|
replace github.com/kami/hexis v0.0.0 => /home/kami/apps/hexis
|