Closed renovate[bot] closed 3 weeks ago
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below:
Command failed: go get -d -t ./...
go: downloading github.com/brianvoe/gofakeit/v5 v5.11.2
go: downloading github.com/btcsuite/btcd v0.24.0
go: downloading github.com/btcsuite/btcd/chaincfg/chainhash v1.1.0
go: downloading github.com/buger/jsonparser v1.1.1
go: downloading github.com/docker/docker v20.10.6+incompatible
go: downloading github.com/docker/go-connections v0.4.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/lightningnetwork/lnd v0.11.1-beta.rc5
go: downloading github.com/xplorfin/docker-utils v0.13.0
go: downloading github.com/xplorfin/netutils v0.42.0
go: downloading google.golang.org/grpc v1.29.1
go: downloading gopkg.in/macaroon.v2 v2.1.0
go: downloading github.com/stretchr/testify v1.7.0
go: downloading github.com/docker/go-units v0.4.0
go: downloading github.com/opencontainers/image-spec v1.0.1
go: downloading github.com/hashicorp/errwrap v1.0.0
go: downloading github.com/btcsuite/btcutil v1.0.2
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/go-errors/errors v1.0.1
go: downloading github.com/btcsuite/btcwallet v0.11.1-0.20200904022754-2c5947a45222
go: downloading gopkg.in/macaroon-bakery.v2 v2.0.1
go: downloading github.com/btcsuite/btclog v0.0.0-20170628155309-84c8d2346e9f
go: downloading github.com/golang/protobuf v1.4.2
go: downloading github.com/gorilla/websocket v1.5.0
go: downloading github.com/grpc-ecosystem/grpc-gateway v1.14.3
go: downloading golang.org/x/net v0.0.0-20210510120150-4163338589ed
go: downloading github.com/google/uuid v1.2.0
go: downloading golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/miekg/dns v0.0.0-20171125082028-79bfde677fa8
go: downloading github.com/btcsuite/btcwallet/walletdb v1.3.3
go: downloading github.com/juju/loggo v0.0.0-20190526231331-6e530bcce5d8
go: downloading github.com/rogpeppe/fastuuid v1.2.0
go: downloading gopkg.in/errgo.v1 v1.0.1
go: downloading github.com/btcsuite/btcd/btcec/v2 v2.1.3
go: downloading github.com/btcsuite/btcd/btcutil v1.1.5
go: downloading github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1
go: downloading google.golang.org/protobuf v1.23.0
go: downloading google.golang.org/genproto v0.0.0-20190927181202-20e1ac93f88c
go: downloading github.com/btcsuite/btcutil/psbt v1.0.3-0.20200826194809-5f93e33af2b0
go: downloading github.com/btcsuite/btcwallet/wallet/txauthor v1.0.0
go: downloading github.com/btcsuite/btcwallet/wallet/txrules v1.0.0
go: downloading github.com/btcsuite/btcwallet/wtxmgr v1.2.0
go: downloading github.com/containerd/containerd v1.4.3
go: downloading github.com/docker/distribution v2.7.1+incompatible
go: downloading github.com/pkg/errors v0.9.1
go: downloading golang.org/x/sys v0.0.0-20210514084401-e8d321eab015
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/jpillora/backoff v1.0.0
go: downloading github.com/phayes/freeport v0.0.0-20180830031419-95f893ade6f2
go: downloading go.etcd.io/bbolt v1.3.5-0.20200615073812-232d8fc87f50
go: downloading github.com/coreos/etcd v3.3.22+incompatible
go: downloading github.com/lightninglabs/gozmq v0.0.0-20191113021534-d20a764486bf
go: downloading github.com/lightninglabs/neutrino v0.11.1-0.20200316235139-bffc52e8f200
go: downloading github.com/btcsuite/btcwallet/wallet/txsizes v1.0.0
go: downloading github.com/jrick/logrotate v1.0.0
go: downloading github.com/lightningnetwork/lnd/clock v1.0.1
go: downloading github.com/sirupsen/logrus v1.8.0
go: downloading github.com/Microsoft/go-winio v0.4.16
go: downloading github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f
go: downloading go.uber.org/zap v1.14.1
go: downloading github.com/decred/dcrd/crypto/blake256 v1.0.0
go: downloading github.com/btcsuite/go-socks v0.0.0-20170105172521-4720035b7bfd
go: downloading github.com/btcsuite/websocket v0.0.0-20150119174127-31079b680792
go: downloading github.com/aead/siphash v1.0.1
go: downloading github.com/kkdai/bstream v0.0.0-20181106074824-b3251f7901ec
go: downloading github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
go: downloading github.com/soheilhy/cmux v0.1.4
go: downloading github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5
go: downloading sigs.k8s.io/yaml v1.1.0
go: downloading github.com/lightningnetwork/lightning-onion v1.0.2-0.20200501022730-3c8c8d0b89ea
go: downloading github.com/ltcsuite/ltcd v0.0.0-20190101042124-f37f8bf35796
go: downloading github.com/magefile/mage v1.10.0
go: downloading golang.org/x/text v0.3.6
go: downloading github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf
go: downloading github.com/coreos/go-semver v0.3.0
go: downloading go.uber.org/atomic v1.6.0
go: downloading go.uber.org/multierr v1.5.0
go: downloading github.com/jonboulle/clockwork v0.1.0
go: downloading github.com/prometheus/client_golang v0.9.3
go: downloading github.com/dustin/go-humanize v1.0.0
go: downloading github.com/grpc-ecosystem/go-grpc-middleware v1.0.0
go: downloading github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2
go: downloading golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba
go: downloading github.com/decred/dcrd/lru v1.0.0
go: downloading gopkg.in/yaml.v2 v2.3.0
go: downloading github.com/lightningnetwork/lnd/queue v1.0.4
go: downloading golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1
go: downloading github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da
go: downloading github.com/google/btree v1.0.0
go: downloading github.com/dgrijalva/jwt-go v3.2.0+incompatible
go: downloading github.com/coreos/bbolt v1.3.3
go: downloading github.com/beorn7/perks v1.0.0
go: downloading github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4
go: downloading github.com/prometheus/common v0.4.0
go: downloading github.com/prometheus/procfs v0.0.0-20190507164030-5867b95ac084
go: downloading github.com/lightningnetwork/lnd/ticker v1.0.0
go: downloading github.com/json-iterator/go v1.1.9
go: downloading github.com/modern-go/reflect2 v1.0.1
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.1
go: downloading github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421
go: github.com/xplorfin/lndmock imports
github.com/btcsuite/btcd/btcec: cannot find module providing package github.com/btcsuite/btcd/btcec
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
This PR contains the following updates:
v0.21.0-beta
->v0.24.0
GitHub Vulnerability Alerts
CVE-2022-44797
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.
Specific Go Packages Affected
github.com/btcsuite/btcd/wire
CVE-2024-34478
btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds.
Release Notes
btcsuite/btcd (github.com/btcsuite/btcd)
### [`v0.24.0`](https://togithub.com/btcsuite/btcd/releases/tag/v0.24.0): btcd v0.24.0 [Compare Source](https://togithub.com/btcsuite/btcd/compare/v0.23.4...v0.24.0) This release is a major release that includes several general bug fixes, **security bug fixes** (please update!), and also a series of performance improvements that dramatically reduce the time for initial block download from ~45 hours+ to around 6 hours! With this release,`btcd` now also supports BIP 155 and has gained support for pruning (`--prune=MiB`). ### Verifying the Release In order to verify the release, you'll need to have `gpg` or `gpg2` installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already: curl https://raw.githubusercontent.com/lightningnetwork/lnd/master/scripts/keys/roasbeef.asc | gpg --import Once you have the required PGP keys, you can verify the release (assuming `manifest-roasbeef-v0.24.0.sig` and `manifest-v0.24.0.txt` are in the current directory) with: gpg --verify manifest-roasbeef-v0.24.0.sig manifest-v0.24.0.txt You should see the following if the verification was successful: gpg: Signature made Sat Dec 30 17:11:22 2023 PST gpg: using RSA key 60A1FA7DA5BFF08BDCBBE7903BBD59E99B280306 gpg: Good signature from "Olaoluwa OsuntokunConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.