Merge pull request #157 from ownmfa/bconway_update_x_crypto_security

Update golang.org/x/crypto for security

build/deploy/hermes-deps/volume/tls/options.yaml

@@ -4,6 +4,6 @@ tls:
       minVersion: VersionTLS12
       sniStrict: true
       cipherSuites:
-        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
         - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
         - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

go.mod

@@ -1,25 +1,25 @@
 module github.com/ownmfa/hermes
 
-go 1.23.2
+go 1.23.4
 
 require (
 	github.com/NYTimes/gziphandler v1.1.1
 	github.com/google/uuid v1.6.0
 	github.com/gregdel/pushover v1.3.1
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.24.0
 	github.com/jackc/pgx/v5 v5.7.1
 	github.com/jellydator/ttlcache/v3 v3.3.0
 	github.com/mennanov/fmutils v0.3.0
 	github.com/nsqio/go-nsq v1.1.0
-	github.com/ownmfa/proto/go v1.1.8
+	github.com/ownmfa/proto/go v1.1.9
 	github.com/redis/go-redis/v9 v9.7.0
 	github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e
-	github.com/smira/go-statsd v1.3.3
-	github.com/stretchr/testify v1.9.0
+	github.com/smira/go-statsd v1.3.4
+	github.com/stretchr/testify v1.10.0
 	go.uber.org/mock v0.5.0
-	golang.org/x/crypto v0.28.0
-	google.golang.org/grpc v1.67.1
-	google.golang.org/protobuf v1.35.1
+	golang.org/x/crypto v0.31.0
+	google.golang.org/grpc v1.69.0
+	google.golang.org/protobuf v1.35.2
 )
 
 require (
@@ -33,11 +33,11 @@ require (
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/rogpeppe/go-internal v1.12.0 // indirect
-	golang.org/x/net v0.30.0 // indirect
-	golang.org/x/sync v0.8.0 // indirect
-	golang.org/x/sys v0.26.0 // indirect
-	golang.org/x/text v0.19.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
+	golang.org/x/net v0.32.0 // indirect
+	golang.org/x/sync v0.10.0 // indirect
+	golang.org/x/sys v0.28.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

proto/Makefile

@@ -5,7 +5,7 @@
 generate:
 	cp -Rf ../../proto/protobuf/api protobuf/
 	docker compose build --progress=plain --no-cache --pull
-	docker compose up
+	docker compose up --menu=false
 	docker compose down
 	rm -rf protobuf/api
 	cp -f ../../proto/openapi/hermes.swagger.json ../web/