What's New in v1.7.3
This is a security update that addresses multiple CVEs by updating dependencies.
Security Fixes
🔒 Updated golang.org/x/tools to fix CVEs
Updated golang.org/x/tools
from v0.0.0-20191109212701 (November 2019) to v0.38.0 (latest) to address multiple security vulnerabilities:
- CVE-2021-38561 - Fixed
- CVE-2019-9512 - Fixed
- CVE-2020-29652 - Fixed
Changes
- Updated
golang.org/x/tools
from 2019 version to v0.38.0 - Updated Go directive to 1.24.0 (with toolchain go1.24.5)
- Added indirect dependencies:
golang.org/x/mod
v0.29.0,golang.org/x/sync
v0.17.0 - Fixed test code compatibility with stricter format string checking in newer x/tools
All tests pass with the updated dependencies.
Installation
go install github.com/cweill/gotests/gotests@v1.7.3
Important Note
We recommend all users update to this version to ensure you have the latest security fixes.
Full Changelog: v1.7.2...v1.7.3
Thanks to @testwill for identifying these security vulnerabilities!