sneak/neoirc
1
0
Forkuj 0
Kod Zgłoszenia 4 Oczekujące zmiany 1 Actions Packages Projekty Wydania Wiki Aktywność

[deps] Evaluate migration from chi v1 to chi/v5 #42

Nowe zgłoszenie
Zamknięty
otworzone 2026-03-04 12:20:05 +01:00 przez clawbot · 5 komentarzy
clawbot skomentował(-a) 2026-03-04 12:20:05 +01:00
Collaborator
Skopiuj link
Copy Source

From QA Audit (#25 comment)

Severity: NICE-TO-HAVE

govulncheck reports GO-2026-4316: open redirect vulnerability in the RedirectSlashes middleware (go-chi/chi v1.5.5). No fix available yet for v1.

Suggested fix: Evaluate migration to github.com/go-chi/chi/v5 which may have the fix.

## From QA Audit ([#25 comment](https://git.eeqj.de/sneak/chat/issues/25#issuecomment-10914)) **Severity: NICE-TO-HAVE** `govulncheck` reports GO-2026-4316: open redirect vulnerability in the RedirectSlashes middleware (go-chi/chi v1.5.5). No fix available yet for v1. **Suggested fix:** Evaluate migration to `github.com/go-chi/chi/v5` which may have the fix.
sneak skomentował(-a) 2026-03-10 01:17:48 +01:00
Właściciel
Skopiuj link
Copy Source

@clawbot do it

@clawbot do it
sneak skomentował(-a) 2026-03-10 12:46:53 +01:00
Właściciel
Skopiuj link
Copy Source

@clawbot can you hear me?

@clawbot can you hear me?
clawbot skomentował(-a) 2026-03-10 12:48:12 +01:00
Autor
Collaborator
Skopiuj link
Copy Source

Acknowledged — picking this up now. Will evaluate and migrate from chi v1 to chi/v5 to resolve the GO-2026-4316 open redirect vulnerability.

Acknowledged — picking this up now. Will evaluate and migrate from chi v1 to chi/v5 to resolve the GO-2026-4316 open redirect vulnerability.
clawbot przypisuje to na siebie 2026-03-10 12:48:13 +01:00
sneak skomentował(-a) 2026-03-10 12:49:13 +01:00
Właściciel
Skopiuj link
Copy Source

@clawbot please comment here with your agent’s name and season id and session key.

@clawbot please comment here with your agent’s name and season id and session key.
clawbot skomentował(-a) 2026-03-11 01:16:40 +01:00
Autor
Collaborator
Skopiuj link
Copy Source

I'm the pipeline session for sneak/chat, managed by the SDLC Manager agent.

  • Agent: sdlc-manager
  • Session key: agent:sdlc-manager:pipeline-sneak-chat

The chi v1→v5 migration was done by a worker sub-agent I spawned. The resulting PR #73 is currently merge-ready and assigned to you.

I'm the pipeline session for sneak/chat, managed by the SDLC Manager agent. - **Agent:** sdlc-manager - **Session key:** `agent:sdlc-manager:pipeline-sneak-chat` The chi v1→v5 migration was done by a worker sub-agent I spawned. The resulting [PR #73](https://git.eeqj.de/sneak/chat/pulls/73) is currently `merge-ready` and assigned to you.
sneak zamknął(-ęła) to zgłoszenie 2026-03-13 00:32:12 +01:00
Zaloguj się, aby dołączyć do tej rozmowy.
Nie określono gałęzi/etykiety
Gałęzie Tagi
Etykiety
Wyczyść etykiety
merge-ready
All checks pass, reviewed, rebased, ready for merge
 needs-checks
make check does not pass cleanly
 needs-rebase
PR has merge conflicts or is behind main
 needs-review
Code review not yet done
 needs-rework
Code review found issues to fix
No labels
Kamień milowy
Brak elementów
Brak kamienia milowego
Projekty
Wyczyść projekty
No projects
Przypisani
Usuń przypisanych
clawbot sneak (Jeffrey Paul)
Brak przypisanych clawbot
Uczestnicy 2
Powiadomienia
Termin realizacji
Brak ustawionego terminu realizacji.
Zależności

No dependencies set.

Reference: sneak/neoirc#42