fix: bump grpc for CVE-2026-33186#104

Open

devnullvoid wants to merge 2 commits intodevelopfrom

fix-grpc-cve-2026-33186

Owner

devnullvoid commented Mar 24, 2026

Summary

bump indirect dependency google.golang.org/grpc from v1.79.1 to v1.79.3
document the security update in the unreleased changelog
address issue Security issue in google.golang.org/grpc < v1.79.3 #103

Verification

make build
make test
make code-quality

Closes #103


          fix: bump grpc for CVE-2026-33186

6a39342

devnullvoid mentioned this pull request

Security issue in google.golang.org/grpc < v1.79.3 #103

Open


          chore(nix): update vendorHash

9ae3c79

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet