1
82%
main: 82%

Ran 13 Jan 2026 06:09PM UTC

Files 40

Run time 1s

Badge

Embed ▾

Committed 13 Jan 2026 06:06PM UTC coverage: 82.781%. Remained the same

Job # 20967370120.1

Build Type

push

github

Committed by

web-flow

Commit Message

fix(deps): migrate from gopkg.in/square/go-jose.v2 to go-jose/v4 (#237)

Fixes CVE-2024-28180 (GHSA-c5q2-7r4c-mv6g) by migrating from the
archived gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v4.

Key changes for go-jose/v4 API:
- jwt.ParseSigned() now requires allowed signature algorithms
- jwt.Expected.Audience renamed to jwt.Expected.AnyAudience
- builder.CompactSerialize() renamed to builder.Serialize()

Also upgrades m-lab/access to v0.0.13 which uses go-jose/v4.

Adds documentation in management/README.md explaining JWT algorithm
choices (EdDSA for Locate signing, RS256 for Cloud Endpoints).

Run Details

2250 of 2718 relevant lines covered (82.78%)

5.68 hits per line

m-lab / locate / 20967370120 / 1
82%
main: 82%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 20967370120.1

m-lab / locate / 20967370120 / 1 82% main: 82%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 20967370120.1

m-lab / locate / 20967370120 / 1
82%
main: 82%

README BADGES
x