From 6793dced3667934a1d1608e5ef87fc870e62b0fd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 5 Sep 2026 03:25:44 +0000 Subject: [PATCH] Bump code.cloudfoundry.org/locket from 1.10.0 to 1.11.0 Bumps [code.cloudfoundry.org/locket](https://github.com/cloudfoundry/locket) from 1.10.0 to 1.11.0. - [Release notes](https://github.com/cloudfoundry/locket/releases) - [Commits](https://github.com/cloudfoundry/locket/compare/v1.10.0...v1.11.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/locket dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- go.mod | 10 +++++----- go.sum | 20 +++++++++---------- .../grpc/internal/transport/http2_server.go | 6 ++++++ vendor/google.golang.org/grpc/version.go | 2 +- vendor/modules.txt | 10 +++++----- 5 files changed, 27 insertions(+), 21 deletions(-) diff --git a/go.mod b/go.mod index 5233680a..52c4eda9 100644 --- a/go.mod +++ b/go.mod @@ -10,7 +10,7 @@ require ( code.cloudfoundry.org/diego-logging-client v0.122.0 code.cloudfoundry.org/lager/v3 v3.85.0 code.cloudfoundry.org/localip v0.86.0 - code.cloudfoundry.org/locket v1.10.0 + code.cloudfoundry.org/locket v1.11.0 code.cloudfoundry.org/runtimeschema v0.0.0-20240514235758-31be7684c5bf code.cloudfoundry.org/workpool v0.0.0-20250911194158-1489753f182e github.com/cloudfoundry/dropsonde v1.1.0 @@ -24,8 +24,8 @@ require ( code.cloudfoundry.org/bbs/encryption v1.9.0 // indirect code.cloudfoundry.org/bbs/format v1.9.0 // indirect code.cloudfoundry.org/cfhttp/v2 v2.83.0 // indirect - code.cloudfoundry.org/durationjson v0.86.0 // indirect - code.cloudfoundry.org/go-diodes v0.0.0-20260818081020-5f89c9327272 // indirect + code.cloudfoundry.org/durationjson v0.87.0 // indirect + code.cloudfoundry.org/go-diodes v0.0.0-20260831145205-e8366a756183 // indirect code.cloudfoundry.org/go-loggregator/v9 v9.2.1 // indirect code.cloudfoundry.org/tlsconfig v0.65.0 // indirect filippo.io/edwards25519 v1.2.0 // indirect @@ -54,8 +54,8 @@ require ( golang.org/x/sys v0.47.0 // indirect golang.org/x/text v0.41.0 // indirect golang.org/x/tools v0.49.0 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 // indirect - google.golang.org/grpc v1.83.1 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a // indirect + google.golang.org/grpc v1.83.2 // indirect google.golang.org/protobuf v1.36.12 // indirect gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect ) diff --git a/go.sum b/go.sum index 9cbd64e9..06d5e20e 100644 --- a/go.sum +++ b/go.sum @@ -14,18 +14,18 @@ code.cloudfoundry.org/debugserver v0.112.0 h1:AhWE+G/mivfsvX/KdVU5LcPr3WXY1DRD2y code.cloudfoundry.org/debugserver v0.112.0/go.mod h1:7HgnHVvZKzniSSQww4JtsJhoH2nvX+qqxA9Kk2sxHhk= code.cloudfoundry.org/diego-logging-client v0.122.0 h1:079X/Q3AJ9x5BWviRgcoK3wvdYV5rEarJl3N6p7BIaY= code.cloudfoundry.org/diego-logging-client v0.122.0/go.mod h1:jeAwR2ErJpw4n0Dmz1PYVI228i3ZmewKVJb0QNRziA8= -code.cloudfoundry.org/durationjson v0.86.0 h1:roOUOfjiGuc+cj2HDGz+C5xPyr7TLMVufSI2e2z0zH8= -code.cloudfoundry.org/durationjson v0.86.0/go.mod h1:OS8be7UxH5k7JsPUA1HUlIoNCz0gkogV1HPqFeWd1W4= -code.cloudfoundry.org/go-diodes v0.0.0-20260818081020-5f89c9327272 h1:GAdBWzt881Ulr6ELFZHH8Brii1a9gYJhC3kKYrOJmjY= -code.cloudfoundry.org/go-diodes v0.0.0-20260818081020-5f89c9327272/go.mod h1:S9HJ0GGRD/g86IiyDdweYgKLP7nbdVfxrCVV4aNSFSE= +code.cloudfoundry.org/durationjson v0.87.0 h1:gvCXgMyMNcobSX6MDdmPyT9YKAFJYWhIvSZzlAO7lWA= +code.cloudfoundry.org/durationjson v0.87.0/go.mod h1:Sx/UMN5OEybm6ksKyUxwsZvD92KZOBVnrOEQHavW3Cc= +code.cloudfoundry.org/go-diodes v0.0.0-20260831145205-e8366a756183 h1:LUSKGl8Wyfomxk6oX166AzJLObAeQbtjNfBuEcnKnbs= +code.cloudfoundry.org/go-diodes v0.0.0-20260831145205-e8366a756183/go.mod h1:/1BMivaq1Chyx2UC+T3cXrPZJnFjZ60vz5BYE9h/TNU= code.cloudfoundry.org/go-loggregator/v9 v9.2.1 h1:S6Lgg5UJbhh2bt2TGQxs6R00CF8PrUA3GFPYDxy56Fk= code.cloudfoundry.org/go-loggregator/v9 v9.2.1/go.mod h1:FTFFruqGeOhVCDFvyLgl8EV8YW63NNwRzLhxJcporu8= code.cloudfoundry.org/lager/v3 v3.85.0 h1:4AebS51o+48Pxaba53K7ehogN8XJoKuW9ZEtq6Kjm4Y= code.cloudfoundry.org/lager/v3 v3.85.0/go.mod h1:R04ztm9KdIqZ0XaZa8q9+dt7+jgdmgiunKWINfNvPc0= code.cloudfoundry.org/localip v0.86.0 h1:25b9njv404T5SuChRnZXRnE5xr2yaAneTYcOuNZUBxk= code.cloudfoundry.org/localip v0.86.0/go.mod h1:oNoVlrT3DDEyrcVHP9aEf9Xms+ekTeR3EAHKA50jrh8= -code.cloudfoundry.org/locket v1.10.0 h1:J45UbwAU8GFGVhumg7pQxkbkjK+fV+kmO36dm2ia1hg= -code.cloudfoundry.org/locket v1.10.0/go.mod h1:Kz0ub2ZSz6tRADJZg9CtegzIuluw+bgOhxv5IlbJ5RM= +code.cloudfoundry.org/locket v1.11.0 h1:D+jf5vHgp+2ypg2A9k1AlbJdVw+qmQ2caaKLfRkLTbA= +code.cloudfoundry.org/locket v1.11.0/go.mod h1:wfznrQScFpRi/a6AgwEbMhCphKFrrvNEo74pqx2Ydmo= code.cloudfoundry.org/runtimeschema v0.0.0-20240514235758-31be7684c5bf h1:sTpfHaU+tgDeRO/fRnyr91gvf1FaJk3ZNiJHiHq4nko= code.cloudfoundry.org/runtimeschema v0.0.0-20240514235758-31be7684c5bf/go.mod h1:Cbw66uMLAXkeK8ZpcTUIJ9nhXNxaN742q1xS/ONrWiQ= code.cloudfoundry.org/tlsconfig v0.65.0 h1:mPga0pCfQp9nTHgXizFrfpsWmmcGHIUgD+cYb8KPpmw= @@ -191,10 +191,10 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4= gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 h1:cYNAzI2sUwhmCcoj9TxvihSrqsxt6uIkj3rDRhSDmW4= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688/go.mod h1:DjtHYE8FKJLivXcBEjGwndXfIC23G0VpXiXKqG179uA= -google.golang.org/grpc v1.83.1 h1:HIO0+BEtBP6soyqvqC8sNUjZ7bTs+0hFQuFF+RAy++Y= -google.golang.org/grpc v1.83.1/go.mod h1:kDyl6SKsiHKt0uylY5gtn5cEjkrIOhQOGDgIc4JGwzQ= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a h1:3Dnd1cDaZlB68lziofO+bJXpjOy8UfRv8Unt+yH8tQ4= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a/go.mod h1:DjtHYE8FKJLivXcBEjGwndXfIC23G0VpXiXKqG179uA= +google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU= +google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8= google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc= google.golang.org/protobuf v1.36.12/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= diff --git a/vendor/google.golang.org/grpc/internal/transport/http2_server.go b/vendor/google.golang.org/grpc/internal/transport/http2_server.go index 63c6539a..82e13e64 100644 --- a/vendor/google.golang.org/grpc/internal/transport/http2_server.go +++ b/vendor/google.golang.org/grpc/internal/transport/http2_server.go @@ -522,6 +522,12 @@ func (t *http2Server) operateHeaders(ctx context.Context, frame *http2.MetaHeade delete(mdata, "host") } + // If :authority is still missing, i.e. no host or :authority header is + // present, reject the request as invalid. + if len(mdata[":authority"]) == 0 { + t.writeEarlyAbort(streamID, s.contentSubtype, status.New(codes.Internal, "no host or :authority header present"), http.StatusBadRequest, !frame.StreamEnded()) + return nil + } if frame.StreamEnded() { // s is just created by the caller. No lock needed. s.state = streamReadDone diff --git a/vendor/google.golang.org/grpc/version.go b/vendor/google.golang.org/grpc/version.go index 64ec3b3c..835dc07f 100644 --- a/vendor/google.golang.org/grpc/version.go +++ b/vendor/google.golang.org/grpc/version.go @@ -19,4 +19,4 @@ package grpc // Version is the current grpc version. -const Version = "1.83.1" +const Version = "1.83.2" diff --git a/vendor/modules.txt b/vendor/modules.txt index 4a6403b4..a5e42741 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -28,10 +28,10 @@ code.cloudfoundry.org/debugserver ## explicit; go 1.25.8 code.cloudfoundry.org/diego-logging-client code.cloudfoundry.org/diego-logging-client/testhelpers -# code.cloudfoundry.org/durationjson v0.86.0 +# code.cloudfoundry.org/durationjson v0.87.0 ## explicit; go 1.25.0 code.cloudfoundry.org/durationjson -# code.cloudfoundry.org/go-diodes v0.0.0-20260818081020-5f89c9327272 +# code.cloudfoundry.org/go-diodes v0.0.0-20260831145205-e8366a756183 ## explicit; go 1.25.0 code.cloudfoundry.org/go-diodes # code.cloudfoundry.org/go-loggregator/v9 v9.2.1 @@ -48,7 +48,7 @@ code.cloudfoundry.org/lager/v3/lagertest # code.cloudfoundry.org/localip v0.86.0 ## explicit; go 1.25.0 code.cloudfoundry.org/localip -# code.cloudfoundry.org/locket v1.10.0 +# code.cloudfoundry.org/locket v1.11.0 ## explicit; go 1.26.0 code.cloudfoundry.org/locket code.cloudfoundry.org/locket/cmd/locket/certauthority @@ -300,10 +300,10 @@ golang.org/x/tools/internal/pkgbits golang.org/x/tools/internal/stdlib golang.org/x/tools/internal/typesinternal golang.org/x/tools/internal/versions -# google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 +# google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a ## explicit; go 1.25.0 google.golang.org/genproto/googleapis/rpc/status -# google.golang.org/grpc v1.83.1 +# google.golang.org/grpc v1.83.2 ## explicit; go 1.25.0 google.golang.org/grpc google.golang.org/grpc/attributes