supabase / auth / 30364483649
72%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 196
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 72.126%. Remained the same
30364483649

push

github

web-flow 
fix: update google.golang.org/grpc to v1.82.1 (#2651)

## What kind of change does this PR introduce?

This change updates google.golang.org/grpc to resolve
https://pkg.go.dev/vuln/GO-2026-6061

## What is the current behavior?

```bash
モ make vulncheck
tools/bin/govulncheck ./... | go run ./hack/vulncheck-filter
ignoring GO-2026-5004: pgx/v4 SQL injection via dollar-quoted placeholder confusion, no fix available. Transitive via pop/v6.
ignoring GO-2026-4518: pgproto3/v2 DoS, no fix available (EOL). Transitive via pgconn v1 + pop/v6.

Vulnerability #1: GO-2026-6061
    Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2
    transport server implementation in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6061
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.81.1
    Fixed in: google.golang.org/grpc@v1.82.1
    Example traces found:
      #1: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.Close
      #2: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.Header
      #3: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.Read
      #4: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.RecvCompress
      #5: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.TrailersOnly
      #6: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.ClientStream.Write
      #7: internal/observability/metrics.go:165:16: observability.ConfigureMetrics calls sync.Once.Do, which eventually calls transport.... (continued)

18294 of 25364 relevant lines covered (72.13%)

666.57 hits per line

Jobs
ID Job ID Ran Files Coverage
1 30364483649.1 196
72.13
 GitHub Action Run
Source Files on build 30364483649