request #47633 go-git: 5.13.2 -> 5.19.0

Infos

Artifact ID#47633

Submitted byThomas Gerbet (tgerbet)

Last Modified On2026-05-18 11:21

Submitted on2026-05-15 09:10

Rank49374

Details

Summary *

go-git: 5.13.2 -> 5.19.0

Original Submission

Transitively resolves CVE-2026-44740 and CVE-2026-44973, no real impact for Tuleap case as it runs within a WASM sandbox.

https://github.com/go-git/go-git/releases/tag/v5.19.0
https://github.com/go-git/go-git/releases/tag/v5.18.0
https://github.com/go-git/go-git/releases/tag/v5.17.0
https://github.com/go-git/go-git/releases/tag/v5.16.0
https://github.com/go-git/go-git/releases/tag/v5.15.0
https://github.com/go-git/go-git/releases/tag/v5.14.0

CategoryDev tools

Reported in versionAll

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toThomas Gerbet (tgerbet)

StatusClosed

Close date2026-05-18

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47633

Referenced by request #47633

Artifact

rel #47138 17.6

Other

gerrit #37739

Follow-ups

Joris MASSON (jmasson)

2026-05-18 11:21

Connected artifacts
- Added Fixed in: rel #47138

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-05-18 11:20

Closed by @tgerbet with git #tuleap/tuleap/a9fbb42a9f5ffb95c988db05ca5922af6d812976.

Status changed from Under review to Closed
Close date set to 2026-05-18

Thomas Gerbet (tgerbet)

2026-05-15 09:12

See gerrit #37739.

Status changed from Under implementation to Under review

Public

Referenced by request #47633

Artifact

Other

Follow-ups