maint: Update module github.com/yaronf/httpsign to v0.5.2 #71

Merged

bot-ci merged 1 commit from renovate/all-dependencies into main

2026-07-14 12:03:02 +00:00

renovate-bot commented

2026-07-14 11:50:32 +00:00

Owner

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/yaronf/httpsign	`v0.5.1` → `v0.5.2`

Release Notes

yaronf/httpsign (github.com/yaronf/httpsign)

`v0.5.2`

Compare Source

v0.5.2

Security Fixes

Remote DoS (panic) on verify (GHSA-6wwm-chj6-h3p2) — crafted Signature-Input component parameters with wrong types (req=1, sf="y", etc.) could panic in VerifyRequest / VerifyResponse before cryptographic verification. Component parameters are now validated against the RFC 9421 set; malformed values return errors instead of panicking.

Upgrade: go get github.com/yaronf/httpsign@v0.5.2

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/yaronf/httpsign](https://github.com/yaronf/httpsign) | `v0.5.1` → `v0.5.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fyaronf%2fhttpsign/v0.5.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fyaronf%2fhttpsign/v0.5.1/v0.5.2?slim=true) | --- ### Release Notes <details> <summary>yaronf/httpsign (github.com/yaronf/httpsign)</summary> ### [`v0.5.2`](https://github.com/yaronf/httpsign/releases/tag/v0.5.2) [Compare Source](https://github.com/yaronf/httpsign/compare/v0.5.1...v0.5.2) #### v0.5.2 ##### Security Fixes - **Remote DoS (panic) on verify** ([GHSA-6wwm-chj6-h3p2](https://github.com/yaronf/httpsign/security/advisories/GHSA-6wwm-chj6-h3p2)) — crafted `Signature-Input` component parameters with wrong types (`req=1`, `sf="y"`, etc.) could panic in `VerifyRequest` / `VerifyResponse` before cryptographic verification. Component parameters are now validated against the RFC 9421 set; malformed values return errors instead of panicking. Upgrade: `go get github.com/yaronf/httpsign@v0.5.2` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-14 11:50:32 +00:00

maint: Update module github.com/yaronf/httpsign to v0.5.2

ci/woodpecker/pr/pr_check Pipeline was successful

Details

ci/woodpecker/pr/ci Pipeline was successful

Details

de454d9f57