github
/
setup-go
mirror of https://github.com/actions/setup-go.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
setup-go/.licenses/npm
History
Matthew Hughes be381b31f7 Bump `form-data` to bring in fix for critical vulnerability 
The vulnerability:

    $ npm audit --audit-level=high
    # npm audit report

    form-data  >=4.0.0 <4.0.4 || <2.5.4
    Severity: critical
    form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
    form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
    fix available via `npm audit fix`
    node_modules/@azure/core-http/node_modules/form-data
    node_modules/@types/node-fetch/node_modules/form-data
    node_modules/form-data

    1 critical severity vulnerability

    To address all issues, run:
      npm audit fix

This change is the result of from running `npm audit fix` and then
using[1] to update licenses via `licensed cache`.

It doesn't look like `dependabot` previously raised any PRs for this
dependency, so this bumps it from `4.0.0` to `4.0.4`, see the
changelog[2] for details.

Link: https://github.com/licensee/licensed [1]
Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]
 		2025-07-30 20:42:02 +01:00
..
@actions Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591) 2025-06-18 17:01:53 -05:00
@azure Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
@fastify Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
@opentelemetry Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
@protobuf-ts upgrade actions/cache to 4.0.2 (#568) 2025-03-11 10:19:54 -05:00
@types Bump undici from 5.28.2 to 5.28.3 (#465) 2024-03-21 15:04:22 -05:00
abort-controller.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
asynckit.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
balanced-match.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
brace-expansion.dep.yml Bump typescript from 5.4.2 to 5.8.3 (#538) 2025-07-10 19:26:25 -05:00
call-bind-apply-helpers.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
combined-stream.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
concat-map.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
delayed-stream.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
dunder-proto.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
es-define-property.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
es-errors.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
es-object-atoms.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
es-set-tostringtag.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
event-target-shim.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
events.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
form-data-2.5.5.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
form-data-4.0.4.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
function-bind.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
get-intrinsic.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
get-proto.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
gopd.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
has-symbols.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
has-tostringtag.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
hasown.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
math-intrinsics.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
mime-db.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
mime-types.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
minimatch.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
node-fetch.dep.yml Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
process.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
safe-buffer.dep.yml Bump `form-data` to bring in fix for critical vulnerability 2025-07-30 20:42:02 +01:00
sax.dep.yml Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
semver-6.3.1.dep.yml Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
semver-7.7.1.dep.yml Bump ts-jest from 29.1.2 to 29.3.2 (#582) 2025-04-30 10:37:00 -05:00
tr46.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
tslib-1.14.1.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
tslib-2.6.2.dep.yml Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
tunnel.dep.yml Add Licensed workflow and configuration files 2020-08-11 20:55:11 -04:00
typescript.dep.yml Use the new cache service: upgrade `@actions/cache` to `^4.0.0` (#531) 2025-01-15 14:06:31 -06:00
undici-types.dep.yml Update dependencies for node20 (#445) 2023-12-05 17:50:42 +01:00
undici.dep.yml Bump undici from 5.28.5 to 5.29.0 (#594) 2025-07-08 10:07:25 -05:00
uuid.dep.yml Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591) 2025-06-18 17:01:53 -05:00
webidl-conversions.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
whatwg-url.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00
xml2js.dep.yml Update xml2js (#370) 2023-04-20 14:28:58 +02:00
xmlbuilder.dep.yml Implementation of caching functionality for setup-go action (#228) 2022-05-25 12:07:29 +02:00