Skip to content

Commit 5cbd917

Browse files
mprimeauxmprimeaux
authored
debt: Upgrade dependencies (#16)
* debt: Upgrade dependencies * risk: Adjust fuzz time to account for CI runner * risk: Removed t.Parallel() from fuzz tests
1 parent dd49637 commit 5cbd917

33 files changed

Lines changed: 436 additions & 230 deletions

‎.github/workflows/ci.yaml‎

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc
1+
# Copyright (c) 2024-2025 Six After, Inc
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.
@@ -39,7 +39,6 @@ jobs:
3939
steps:
4040
- name: Preamble
4141
run: |
42-
whoami
4342
echo github ref $GITHUB_REF
4443
echo workflow $GITHUB_WORKFLOW
4544
echo home $HOME
@@ -86,16 +85,16 @@ jobs:
8685
make analyze
8786
8887
# Ref: https://github.com/actions/cache
89-
- name: Cache SonarQube Packages
88+
- name: SonarQube Cache
9089
uses: actions/cache@v4
9190
with:
9291
path: ~/.sonar/cache
9392
key: ${{ runner.os }}-sonar
9493
restore-keys: ${{ runner.os }}-sonar-
9594

9695
# Ref: https://github.com/SonarSource/sonarqube-scan-action
97-
- name: Scan with SonarQube
98-
uses: sonarsource/sonarqube-scan-action@v5
96+
- name: SonarQube Scan
97+
uses: SonarSource/sonarqube-scan-action@v5
9998
with:
10099
projectBaseDir: ./
101100
env:

‎.github/workflows/codeql-analysis.yaml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc
1+
# Copyright (c) 2024-2025 Six After, Inc
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.
@@ -48,7 +48,6 @@ jobs:
4848
steps:
4949
- name: Preamble
5050
run: |
51-
whoami
5251
echo github ref $GITHUB_REF
5352
echo workflow $GITHUB_WORKFLOW
5453
echo home $HOME
@@ -62,7 +61,7 @@ jobs:
6261
6362
# Ref: https://github.com/actions/checkout
6463
- name: Checkout Source
65-
uses: actions/checkout@v4
64+
uses: actions/checkout@v5
6665
with:
6766
fetch-depth: 0
6867

‎.github/workflows/release.yaml‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc
1+
# Copyright (c) 2024-2025 Six After, Inc
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.
@@ -30,7 +30,6 @@ jobs:
3030
steps:
3131
- name: "Preamble"
3232
run: |
33-
whoami
3433
echo github ref $GITHUB_REF
3534
echo workflow $GITHUB_WORKFLOW
3635
echo home $HOME
@@ -44,7 +43,7 @@ jobs:
4443
4544
# Ref: https://github.com/actions/checkout
4645
- name: "Checkout Source"
47-
uses: actions/checkout@v4
46+
uses: actions/checkout@v5
4847
with:
4948
fetch-depth: 0
5049

@@ -60,7 +59,7 @@ jobs:
6059

6160
# Ref: https://github.com/sigstore/cosign-installer
6261
- name: Install Cosign
63-
uses: sigstore/cosign-installer@v3.9.1
62+
uses: sigstore/cosign-installer@v3.9.2
6463

6564
# Ref: https://github.com/anchore/sbom-action
6665
- name: Generate SBOM via Syft

‎.github/workflows/scorecard.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
1-
# This workflow uses actions that are not certified by GitHub. They are provided
2-
# by a third-party and are governed by separate terms of service, privacy
3-
# policy, and support documentation.
1+
# Copyright (c) 2024-2025 Six After, Inc
2+
#
3+
# This source code is licensed under the Apache 2.0 License found in the
4+
# LICENSE file in the root directory of this source tree.
5+
46

57
name: OSSF Supply Chain Security Scorecard
68
on:
@@ -37,7 +39,7 @@ jobs:
3739
steps:
3840
# Ref: https://github.com/actions/checkout
3941
- name: "Checkout code"
40-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
42+
uses: actions/checkout@v5
4143
with:
4244
persist-credentials: false
4345

‎.golangci.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc.
1+
# Copyright (c) 2024-2025 Six After, Inc.
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.

‎.goreleaser.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc.
1+
# Copyright (c) 2024-2025 Six After, Inc.
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.

‎CHANGELOG/CHANGELOG-1.x.md‎

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,22 @@ Date format: `YYYY-MM-DD`
1717
### Fixed
1818
### Security
1919

20+
---
21+
22+
## [1.7.0] - 2025-09-01
23+
24+
### Added
25+
### Changed
26+
- **debt:** Upgraded all dependencies to their latest stable versions.
27+
- **risk:** Updated copyright to reflect date range through present year.
28+
- **risk:** Removed `t.Parallel()` from fuzz tests as fuzzing already runs inputs in parallel.
29+
- The fuzz engine schedules many inputs concurrently across workers (bounded by CPUs / `-test.parallel`). Adding `t.Parallel()` makes each input’s subtest itself run in parallel with others—an unnecessary second layer of parallelism.
30+
31+
### Deprecated
32+
### Removed
33+
### Fixed
34+
### Security
35+
2036
---
2137
## [1.6.0] - 2025-08-13
2238

@@ -119,7 +135,8 @@ Date format: `YYYY-MM-DD`
119135
### Fixed
120136
### Security
121137

122-
[Unreleased]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.6.0...HEAD
138+
[Unreleased]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.7.0...HEAD
139+
[1.7.0]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.6.0...v1.7.0
123140
[1.6.0]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.5.0...v1.6.0
124141
[1.5.0]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.4.0...v1.5.0
125142
[1.4.0]: https://github.com/sixafter/aes-ctr-drbg/compare/v1.3.0...v1.4.0

‎Makefile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Copyright (c) 2024 Six After, Inc.
1+
# Copyright (c) 2024-2025 Six After, Inc.
22
#
33
# This source code is licensed under the Apache 2.0 License found in the
44
# LICENSE file in the root directory of this source tree.
@@ -17,7 +17,7 @@ GO_MOD=$(GO_CMD) mod
1717
GO_LINT_CMD=golangci-lint run
1818
GO_WORK=$(GO_CMD) work
1919
GO_WORK_FILE := ./go.work
20-
FUZZTIME ?= 20s
20+
FUZZTIME ?= 25s
2121

2222
.PHONY: all
2323
all: clean test

‎aes_ctr_drbg.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright (c) 2024 Six After, Inc
1+
// Copyright (c) 2024-2025 Six After, Inc
22
//
33
// This source code is licensed under the Apache 2.0 License found in the
44
// LICENSE file in the root directory of this source tree.

‎aes_ctr_drbg_bench_test.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright (c) 2024 Six After, Inc
1+
// Copyright (c) 2024-2025 Six After, Inc
22
//
33
// This source code is licensed under the Apache 2.0 License found in the
44
// LICENSE file in the root directory of this source tree.

0 commit comments

Comments
 (0)