Skip to content
This repository was archived by the owner on Oct 12, 2025. It is now read-only.

feat(deps): update filosottile/age to v1.2.1#64

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/filosottile-age-1.x
Open

feat(deps): update filosottile/age to v1.2.1#64
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/filosottile-age-1.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jun 17, 2024

This PR contains the following updates:

Package Update Change
FiloSottile/age minor v1.1.1 -> v1.2.1

Release Notes

FiloSottile/age (FiloSottile/age)

v1.2.1: age v1.2.1: security fix

Compare Source

This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions.

See GHSA-32gq-x56h-299c.

Plugin names may now only contain alphanumeric characters or the four special characters +-._.

Thanks to ⬡-49016 for reporting this issue.

v1.2.0: age v1.2.0

Compare Source

A small release to build the release binaries with a more recent Go toolchain, and to fix a couple CLI edge cases (#​491, #​555).

The Go module now exposes a plugin package that provides an age plugin client. That is, Recipient and Identity implementations that invoke a plugin binary, allowing the use of age plugins in Go programs.

Finally, Recipients can now return a set of "labels" by implementing RecipientWithLabels. This allows replicating the special behavior of the scrypt Recipient in third-party Recipients, or applying policy useful for authenticated or post-quantum Recipients.

// RecipientWithLabels can be optionally implemented by a Recipient, in which
// case Encrypt will use WrapWithLabels instead of Wrap.
//
// Encrypt will succeed only if the labels returned by all the recipients
// (assuming the empty set for those that don't implement RecipientWithLabels)
// are the same.
//
// This can be used to ensure a recipient is only used with other recipients
// with equivalent properties (for example by setting a "postquantum" label) or
// to ensure a recipient is always used alone (by returning a random label, for
// example to preserve its authentication properties).
type RecipientWithLabels interface {
	WrapWithLabels(fileKey []byte) (s []*Stanza, labels []string, err error)
}

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dep/minor label Jun 17, 2024
Signed-off-by: Zoltán Horváth <zhorvath83@users.noreply.github.com>
@renovate renovate Bot force-pushed the renovate/filosottile-age-1.x branch from abdd4c7 to ef333f2 Compare December 18, 2024 17:21
@renovate renovate Bot changed the title feat(deps): update filosottile/age to v1.2.0 feat(deps): update filosottile/age to v1.2.1 Dec 18, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants