diff options
| author | Roland Shoemaker <[email protected]> | 2022-12-09 12:43:11 -0800 |
|---|---|---|
| committer | Roland Shoemaker <[email protected]> | 2022-12-09 12:43:11 -0800 |
| commit | e65b1c188ccb9b4aa4863ec702c3985c382f53db (patch) | |
| tree | 237ed41e94275123c13881c87ab71aeb48a86cb5 /go.mod | |
| parent | 4b14d29c207e9969ea62a7fe07d490b036c14722 (diff) | |
Replace golang.org/x/crypto/openpgp with github.com/ProtonMail/go-crypto
The golang.org/x/crypto/openpgp library has been deprecated for over a
year now (see golang.org/issue/44226, and the deprecation notice in the
package documentation). The library is unmaintained and has a number of
API and usability issues. ProtonMail maintains a community fork which
is actively maintained, and for most cases is a drop-in replacement.
This change switches usages of golang.org/x/crypto/openpgp/... with
github.com/ProtonMail/go-crypto/openpgp/..., the only other code changes
are adding a nil packet.Config to a openpgp.CheckArmoredDetachedSignature
call.
(This change is part of a wider effort by the Go Security team to remove
usages of golang.org/x/crypto/openpgp from the Go ecosystem.)
Diffstat (limited to 'go.mod')
| -rw-r--r-- | go.mod | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -3,7 +3,7 @@ module github.com/libgit2/git2go/v34 go 1.13 require ( + github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4 github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 - golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c - golang.org/x/sys v0.0.0-20201204225414-ed752295db88 // indirect + golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 ) |