From e65b1c188ccb9b4aa4863ec702c3985c382f53db Mon Sep 17 00:00:00 2001 From: Roland Shoemaker Date: Fri, 9 Dec 2022 12:43:11 -0800 Subject: Replace golang.org/x/crypto/openpgp with github.com/ProtonMail/go-crypto The golang.org/x/crypto/openpgp library has been deprecated for over a year now (see golang.org/issue/44226, and the deprecation notice in the package documentation). The library is unmaintained and has a number of API and usability issues. ProtonMail maintains a community fork which is actively maintained, and for most cases is a drop-in replacement. This change switches usages of golang.org/x/crypto/openpgp/... with github.com/ProtonMail/go-crypto/openpgp/..., the only other code changes are adding a nil packet.Config to a openpgp.CheckArmoredDetachedSignature call. (This change is part of a wider effort by the Go Security team to remove usages of golang.org/x/crypto/openpgp from the Go ecosystem.) --- go.mod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'go.mod') diff --git a/go.mod b/go.mod index ed6d20c..3735628 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module github.com/libgit2/git2go/v34 go 1.13 require ( + github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4 github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 - golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c - golang.org/x/sys v0.0.0-20201204225414-ed752295db88 // indirect + golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 ) -- cgit v1.2.3