search

hasura / go-graphql-client

Package graphql provides a GraphQL client implementation.
MIT License
395 stars 91 forks source link

Upgrade dependencies #117

Closed steeling closed 8 months ago

steeling commented 8 months ago

https://github.com/nhooyr/websocket explicitly has several (indirect) vulnerabilities at the current version. By upgrading to the latest version, which has no third party dependencies, we'd be able to pass our vuln scans

steeling commented 8 months ago

better yet would be to switch to https://pkg.go.dev/golang.org/x/net/websocket

hgiasac commented 8 months ago

Upgraded latest dependencies on v0.10.2 The net/websocket client is deprecated. Switching to that library isn't the right choice. Its documentation also recommends nhooyr or gorilla websocket