mirrors/lnd
1
0
Fork 0
mirror of https://github.com/lightningnetwork/lnd.git synced 2024-11-19 18:10:34 +01:00
Code Issues Projects Releases Wiki Activity
03a61617f8
lnd/go.mod

188 lines
8.7 KiB
Modula-2
Raw Normal View History

build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
module github.com/lightningnetwork/lnd
require (
github.com/NebulousLabs/go-upnp v0.0.0-20180202185039-29b680b06c82
mod: bump aez library that points to GitLab The newest version of aez points directly to gitlab.com/yawning/bsaes.git instead of the unreachable git.schwanenlied.me/yawning/bsaes.git that required the replace directive.
2022-03-21 20:41:40 +01:00
github.com/Yawning/aez v0.0.0-20211027044916-e49e68abd344
build: update to latest version of btcd
2023-01-24 06:13:00 +01:00
github.com/btcsuite/btcd v0.23.5-0.20230125025938-be056b0a0b2f
multi: add version to MuSig2 API, bump btcd/btcec to v2.3.2 With this commit we bump the github.com/btcd/btcec/v2 library to v2.3.2 which implements the MuSig2 BIP version v1.0.0rc2. With this the github.com/btcsuite/btcd/btcec/v2/schnorr/musig2 package becomes v1.0.0rc2 and the github.com/lightningnetwork/lnd/internal/musig2v040 stays at the old v0.4.0 version.
2023-01-27 16:13:17 +01:00
github.com/btcsuite/btcd/btcec/v2 v2.3.2
build: update to latest version of btcutil+btcwallet
2022-11-22 11:36:36 +01:00
github.com/btcsuite/btcd/btcutil v1.1.3
build: update to latest versions of btec, btcutil, and btcutil/psbt Fixes #6668
2022-08-12 02:10:34 +02:00
github.com/btcsuite/btcd/btcutil/psbt v1.1.5
cmd: add chain subcommand Chain subcommand includes the commands: getblock, getbestblock, and getblockhash. This commit removes conflicting neutrino cli commands.
2022-12-01 18:30:00 +01:00
github.com/btcsuite/btcd/chaincfg/chainhash v1.0.2
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/btcsuite/btclog v0.0.0-20170628155309-84c8d2346e9f
mod: update btcwallet dependency
2023-02-06 16:25:14 +01:00
github.com/btcsuite/btcwallet v0.16.6
build: update to latest version of btcwallet w/ taproot estimation fix Fixes https://github.com/lightningnetwork/lnd/issues/6873
2022-09-24 02:02:04 +02:00
github.com/btcsuite/btcwallet/wallet/txauthor v1.3.2
multi: use btcd's btcec/v2 and btcutil modules This commit was previously split into the following parts to ease review: - 2d746f68: replace imports - 4008f0fd: use ecdsa.Signature - 849e33d1: remove btcec.S256() - b8f6ebbd: use v2 library correctly - fa80bca9: bump go modules
2022-02-23 14:48:00 +01:00
github.com/btcsuite/btcwallet/wallet/txrules v1.2.0
multi: bump btcd to taproot aware version
2022-03-18 18:37:43 +01:00
github.com/btcsuite/btcwallet/walletdb v1.4.0
multi: use btcd's btcec/v2 and btcutil modules This commit was previously split into the following parts to ease review: - 2d746f68: replace imports - 4008f0fd: use ecdsa.Signature - 849e33d1: remove btcec.S256() - b8f6ebbd: use v2 library correctly - fa80bca9: bump go modules
2022-02-23 14:48:00 +01:00
github.com/btcsuite/btcwallet/wtxmgr v1.5.0
kvdb: add postgres
2021-07-13 12:07:48 +02:00
github.com/coreos/go-systemd v0.0.0-20190719114852-fd7a80b32e1f
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/davecgh/go-spew v1.1.1
mod+internal: copy MuSig2 v0.4.0 code from btcd/btcec/v2 With this commit we copy the exact code of the MuSig2 code as found in github.com/btcsuite/btcec/v2/schnorr/musig2 at the tag btcec/v2.2.2. This corresponds to the MuSig2 BIP specification version of v0.4.0.
2023-01-27 16:13:10 +01:00
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/go-errors/errors v1.0.1
mod+kvdb: update etcd to v3.5.0
2021-07-27 12:59:58 +02:00
github.com/golang/protobuf v1.5.2
lnrpc: add WebSocket proxy
2020-04-02 17:46:33 +02:00
github.com/gorilla/websocket v1.4.2
mod+kvdb: update etcd to v3.5.0
2021-07-27 12:59:58 +02:00
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
monitoring: add monitoring package for Prometheus metric exports.
2019-05-31 09:58:37 +02:00
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
lnrpc: update grpc-gateway library to v2
2021-07-27 12:59:59 +02:00
github.com/grpc-ecosystem/grpc-gateway/v2 v2.5.0
postgres: add itest
2021-06-14 16:24:02 +02:00
github.com/jackc/pgx/v4 v4.13.0
Update jackpal/gateway to v1.0.5
2019-04-22 21:15:03 +02:00
github.com/jackpal/gateway v1.0.5
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/jackpal/go-nat-pmp v0.0.0-20170405195558-28a68d0c24ad
build: update go-pretty v6 [skip ci] In this commit we update go-pretty to use the latest v6 version of the library. The existing version we used had a reported vulnerability. Updating to this newest version also helped to shrink our set of indirect dependencies. In the future we can use https://github.com/lightningnetwork/lnd/pull/5870 to detect/flag these issues automatically. Fixes #6293
2022-02-25 00:10:21 +01:00
github.com/jedib0t/go-pretty/v6 v6.2.7
build: update btcd, btcwallet, btcutil, and neutrino In this commit, we update all the `btcsuite` dependencies, along with neutrino to their latest version. The main change in this version is a bug fix in the way that we generated the filters that neutrino uses. As a result, any users running btcd with neutrino today will need to **regenerate their filter chain** using `--dropcfindex`. Any existing neutrino clients out there will also need _re sync_ all together as the "correct" filter header chain.
2019-02-13 04:34:06 +01:00
github.com/jessevdk/go-flags v1.4.0
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/jrick/logrotate v1.0.0
multi: replace DefaultDustLimit with script-specific DustLimitForSize This commit updates call-sites to use the proper dust limits for various script types. This also updates the default dust limit used in the funding flow to be 354 satoshis instead of 573 satoshis.
2021-09-23 21:40:37 +02:00
github.com/kkdai/bstream v1.0.0
build: bump btcd, btcwallet and neutrino to latest versions
2022-06-07 23:48:16 +02:00
github.com/lightninglabs/neutrino v0.14.2
mod: integrate latest btcwallet and bump protobuf and grpc
2021-04-28 15:30:59 +02:00
github.com/lightninglabs/protobuf-hex-display v1.4.3-hex-display
lnwire: allow longer failure messages This fixes an incompatibility where lnd enforces a strict 256 byte failure message, where as the spec sets this only as the recommended length.
2022-09-13 16:13:46 +02:00
github.com/lightningnetwork/lightning-onion v1.2.1-0.20221202012345-ca23184850a1
lnd: bump lnd/cert version This commit bumps the lnd/cert version to 1.2.1 and fixes all call sites where cert.GenCertPair was called.
2023-02-06 20:49:52 +01:00
github.com/lightningnetwork/lnd/cert v1.2.1
Upgrade to go 1.16 for the left over packages Upgraded the go to 1.16 for the rest of the packages.
2021-10-01 15:19:30 +02:00
github.com/lightningnetwork/lnd/clock v1.1.0
mod+healthcheck: use new tor submodule Using the tor module instead of whole lnd in healthcheck allows us to get rid of a lot of indirect dependencies.
2022-03-21 20:41:34 +01:00
github.com/lightningnetwork/lnd/healthcheck v1.2.2
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/lightningnetwork/lnd/kvdb v1.4.1
Upgrade to go 1.16 for the left over packages Upgraded the go to 1.16 for the rest of the packages.
2021-10-01 15:19:30 +02:00
github.com/lightningnetwork/lnd/queue v1.1.0
github.com/lightningnetwork/lnd/ticker v1.1.0
multi: update to tlv/v1.1.0 and use new *P2P tlv decoding variants This changes the call-sites in several places to use the *P2P variants to not trigger an OOM on untrusted input. This makes the code safe with the new tlv version. Note that the call-sites prior to this change were also safe.
2022-12-02 20:51:53 +01:00
github.com/lightningnetwork/lnd/tlv v1.1.0
multi: Add --tor.encryptkey flag functionality to encrypt the Tor private key on disk It's possible that a user might not want the Tor private key to sit on the disk in plaintext (it is a private key after all). So this commit adds a new flag to encrypt the Tor private key on disk using the wallet's seed. When the --tor.encryptkey flag is used, LND will still write the Tor key to the same file, however it will now be encrypted intead of plaintext. This essentially uses the same method to encrypt the Tor private key as is used to encrypt the Static Channel Backup file.
2022-05-11 03:11:19 +02:00
github.com/lightningnetwork/lnd/tor v1.1.0
build: update ltcd import The main ltcd repo has been force pushed, which removed the commit that we pinned against prior. In this commit, we update to the latest version of ltcd.
2019-01-02 20:15:34 +01:00
github.com/ltcsuite/ltcd v0.0.0-20190101042124-f37f8bf35796
mod: bump miekg/dns to next version The dns has https://deps.dev/go/github.com%2Fmiekg%2Fdns/v1.1.25 has GO-2020-0012 https://storage.googleapis.com/go-vulndb/golang.org/x/crypto.json Updated the dependency with the fix.
2021-09-16 00:51:29 +02:00
github.com/miekg/dns v1.1.43
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/prometheus/client_golang v1.11.1
mod: bump btcwallet to version with addr validation This commit bumps the btcwallet dependency to the version that includes the address validation that asserts we can sign for an address before we use it.
2022-11-10 13:10:52 +01:00
github.com/stretchr/testify v1.8.0
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
github.com/tv42/zbase32 v0.0.0-20160707012821-501572607d02
dep: urfave/cli update
2022-06-28 08:13:47 +02:00
github.com/urfave/cli v1.22.9
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
go.etcd.io/etcd/client/pkg/v3 v3.5.7
go.etcd.io/etcd/client/v3 v3.5.7
golang.org/x/crypto v0.1.0
mod: add golang.org/x/exp This commit adds experimental support for generic type constraints.
2022-11-24 15:34:50 +01:00
golang.org/x/exp v0.0.0-20221111094246-ab4555d3164f
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
golang.org/x/net v0.4.0
funding: add batch funding function
2021-08-24 11:21:51 +02:00
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
golang.org/x/term v0.3.0
mod+kvdb: update etcd to v3.5.0
2021-07-27 12:59:58 +02:00
golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
google.golang.org/grpc v1.41.0
google.golang.org/protobuf v1.27.1
build: add new go.mod and go.sum files for go modules usage
2018-11-29 02:12:03 +01:00
gopkg.in/macaroon-bakery.v2 v2.0.1
gopkg.in/macaroon.v2 v2.0.0
)
build: update deps to use ticker and queue modules
2019-02-07 02:18:08 +01:00
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
require (
github.com/NebulousLabs/fastrand v0.0.0-20181203155948-6fb6489aac4e // indirect
github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
github.com/aead/siphash v1.0.1 // indirect
github.com/andybalholm/brotli v1.0.3 // indirect
github.com/beorn7/perks v1.0.1 // indirect
build: update to latest version of btcwallet w/ taproot estimation fix Fixes https://github.com/lightningnetwork/lnd/issues/6873
2022-09-24 02:02:04 +02:00
github.com/btcsuite/btcwallet/wallet/txsizes v1.2.3 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/btcsuite/go-socks v0.0.0-20170105172521-4720035b7bfd // indirect
github.com/btcsuite/websocket v0.0.0-20150119174127-31079b680792 // indirect
github.com/btcsuite/winsvc v1.0.0 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/cenkalti/backoff/v4 v4.1.1 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/cespare/xxhash/v2 v2.1.1 // indirect
github.com/coreos/go-semver v0.3.0 // indirect
github.com/coreos/go-systemd/v22 v22.3.2 // indirect
github.com/cpuguy83/go-md2man/v2 v2.0.0 // indirect
github.com/decred/dcrd/crypto/blake256 v1.0.0 // indirect
github.com/decred/dcrd/lru v1.0.0 // indirect
github.com/dsnet/compress v0.0.1 // indirect
github.com/dustin/go-humanize v1.0.0 // indirect
github.com/fergusstrange/embedded-postgres v1.10.0 // indirect
github.com/gogo/protobuf v1.3.2 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/golang-jwt/jwt/v4 v4.4.2 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/golang/snappy v0.0.4 // indirect
github.com/google/btree v1.0.1 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/google/uuid v1.3.0 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
github.com/jackc/chunkreader/v2 v2.0.1 // indirect
github.com/jackc/pgconn v1.10.0 // indirect
github.com/jackc/pgio v1.0.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgproto3/v2 v2.1.1 // indirect
github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b // indirect
github.com/jackc/pgtype v1.8.1 // indirect
github.com/jackc/puddle v1.1.3 // indirect
github.com/jonboulle/clockwork v0.2.2 // indirect
github.com/json-iterator/go v1.1.11 // indirect
github.com/juju/loggo v0.0.0-20210728185423-eebad3a902c4 // indirect
github.com/juju/testing v0.0.0-20220203020004-a0ff61f03494 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/klauspost/compress v1.13.6 // indirect
github.com/klauspost/pgzip v1.2.5 // indirect
github.com/lib/pq v1.10.3 // indirect
github.com/lightninglabs/gozmq v0.0.0-20191113021534-d20a764486bf // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/mattn/go-isatty v0.0.16 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/mattn/go-runewidth v0.0.13 // indirect
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
github.com/mholt/archiver/v3 v3.5.0 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.1 // indirect
github.com/nwaples/rardecode v1.1.2 // indirect
github.com/pierrec/lz4/v4 v4.1.8 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/prometheus/client_model v0.2.0 // indirect
github.com/prometheus/common v0.26.0 // indirect
github.com/prometheus/procfs v0.6.0 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
github.com/remyoudompheng/bigfft v0.0.0-20200410134404-eec4a21b6bb0 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/rivo/uniseg v0.2.0 // indirect
github.com/rogpeppe/fastuuid v1.2.0 // indirect
github.com/russross/blackfriday/v2 v2.0.1 // indirect
github.com/shurcooL/sanitized_anchor_name v1.0.0 // indirect
github.com/sirupsen/logrus v1.7.0 // indirect
github.com/soheilhy/cmux v0.1.5 // indirect
github.com/spf13/pflag v1.0.5 // indirect
mod: bump btcwallet to version with addr validation This commit bumps the btcwallet dependency to the version that includes the address validation that asserts we can sign for an address before we use it.
2022-11-10 13:10:52 +01:00
github.com/stretchr/objx v0.4.0 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
github.com/syndtr/goleveldb v1.0.1-0.20210819022825-2ae1ddf74ef7 // indirect
github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802 // indirect
github.com/ulikunitz/xz v0.5.10 // indirect
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2 // indirect
gitlab.com/yawning/bsaes.git v0.0.0-20190805113838-0a714cd429ec // indirect
go.etcd.io/bbolt v1.3.6 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
go.etcd.io/etcd/api/v3 v3.5.7 // indirect
go.etcd.io/etcd/client/v2 v2.305.7 // indirect
go.etcd.io/etcd/pkg/v3 v3.5.7 // indirect
go.etcd.io/etcd/raft/v3 v3.5.7 // indirect
go.etcd.io/etcd/server/v3 v3.5.7 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.25.0 // indirect
go.opentelemetry.io/otel v1.0.1 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.0.1 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.0.1 // indirect
go.opentelemetry.io/otel/sdk v1.0.1 // indirect
go.opentelemetry.io/otel/trace v1.0.1 // indirect
go.opentelemetry.io/proto/otlp v0.9.0 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
go.uber.org/atomic v1.7.0 // indirect
go.uber.org/multierr v1.6.0 // indirect
go.uber.org/zap v1.17.0 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
golang.org/x/mod v0.6.0 // indirect
golang.org/x/sys v0.3.0 // indirect
golang.org/x/text v0.5.0 // indirect
golang.org/x/tools v0.2.0 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
google.golang.org/genproto v0.0.0-20210617175327-b9e0b3197ced // indirect
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
gopkg.in/errgo.v1 v1.0.1 // indirect
gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
gopkg.in/yaml.v2 v2.4.0 // indirect
mod: bump btcwallet to version with addr validation This commit bumps the btcwallet dependency to the version that includes the address validation that asserts we can sign for an address before we use it.
2022-11-10 13:10:52 +01:00
gopkg.in/yaml.v3 v3.0.1 // indirect
go.mod+lnrpc+github: point to latest kvdb changes Use kvdb package v1.4.1. This update also forced the protobuf version to be bumped which required `make rpc` to be run to update the generated files. This also required a bump in the github pinned dependencies config for the grpc and protobuf libs.
2022-12-15 17:15:48 +01:00
lukechampine.com/uint128 v1.2.0 // indirect
modernc.org/cc/v3 v3.40.0 // indirect
modernc.org/ccgo/v3 v3.16.13 // indirect
modernc.org/libc v1.22.2 // indirect
modernc.org/mathutil v1.5.0 // indirect
modernc.org/memory v1.4.0 // indirect
modernc.org/opt v0.1.3 // indirect
modernc.org/sqlite v1.20.3 // indirect
modernc.org/strutil v1.1.3 // indirect
modernc.org/token v1.0.1 // indirect
mod: bump btcec to MuSig2 version, require go 1.17
2022-04-27 22:20:29 +02:00
sigs.k8s.io/yaml v1.2.0 // indirect
)
mod : Replace for OSV GO-2020-0017 JWT The github.com/dgrijalva/jwt-go is no longer maintained has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc But it is being used by https://github.com/etcd-io/etcd/issues/13254 which `lnd` uses. The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of the same version which was 3.2.0 with the security fix.
2021-09-15 22:34:44 +02:00
// This replace is for https://github.com/advisories/GHSA-w73w-5m7g-f7qc
replace github.com/dgrijalva/jwt-go => github.com/golang-jwt/jwt v3.2.1+incompatible
mod: Upgraded xz library to FIX the CVE-2021-29482 Included a replace directive to avoid using an high severity CVE https://github.com/advisories/GHSA-25xm-hr59-7c27 This library is indirectly referenced and cannot be upgraded directly. The https://github.com/fergusstrange/embedded-postgres/pull/42 was merged to fix the CVE issue.
2021-09-24 20:55:09 +02:00
// This replace is for https://github.com/advisories/GHSA-25xm-hr59-7c27
replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.8
mod : replace gogo/protobuf for GO-2021-0053 The gogo/protobuf has OSV GO-2021-0053 https://deps.dev/advisory/OSV/GO-2021-0053?from=%2Fgo%2Fgithub.com%252Flightningnetwork%252Flnd This is used indirectly and has to be replaced in go.mod to avoid the direct reference to that version. The OSV has been addressed in v1.3.2
2021-09-19 03:53:09 +02:00
// This replace is for
// https://deps.dev/advisory/OSV/GO-2021-0053?from=%2Fgo%2Fgithub.com%252Fgogo%252Fprotobuf%2Fv1.3.1
replace github.com/gogo/protobuf => github.com/gogo/protobuf v1.3.2
mod+GitHub: shorten PR template, bump golang to 1.15 The golang version always needs to be in sync between the go.mod, the PR checklist and the installation instructions. We also shorten the Pull Request template by removing everything that we have a CI check for and just refer to those checks instead.
2021-07-20 09:32:53 +02:00
// If you change this please also update .github/pull_request_template.md and
// docs/INSTALL.md.
build: make Go 1.18 the min version, update to Go 1.19 As usual, we keep with the last two Go versions, which means the last year of Go release (they release every 6 months or so). This change means we can now use the type params (generics) in the project!
2022-08-04 02:27:26 +02:00
go 1.18
build: retract v0.0.2 A stray version of lnd was pushed out waaaay back in 2016 that can trip up `pkg.go.dev` and things like `go get`. Using the new Go 1.16 feature, we can now "retract" this version, which marks it as being unavailable.
2021-08-26 01:04:30 +02:00
retract v0.0.2
Reference in New Issue Copy Permalink