lukaszraczylo/graphql-monitoring-proxy
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/graphql-monitoring-proxy.git synced 2026-11-10 09:04:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
562 Commits 5 Branches 424 Tags
5e2166d8de332d30f968e2e8ba11c0160b04a80d
Commit Graph
326 Commits
Author SHA1 Message Date
github-actions[bot]andGitHub 5e2166d8de chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-10 03:05:13 +00:00
github-actions[bot]andGitHub b1666ebdb2 chore(deps): update module github.com/gofiber/contrib/v3/websocket to v1.2.13 
Automated dependency update. All tests passed.
 2026-11-09 03:05:14 +00:00
github-actions[bot]andGitHub 2271aaff53 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-07 03:04:15 +00:00
github-actions[bot]andGitHub 9c271cdd4c chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-06 03:05:19 +00:00
github-actions[bot]andGitHub d3d0b3f7c2 chore(deps): update module github.com/avast/retry-go/v5 to v5.0.1 
Automated dependency update. All tests passed.
 2026-11-05 03:05:21 +00:00
github-actions[bot]andGitHub e3066ad7f0 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-04 03:05:05 +00:00
github-actions[bot]andGitHub e138b44d00 chore(deps): update module go.yaml.in/yaml/v3 to v3.0.6 
Automated dependency update. All tests passed.
 2026-11-03 03:05:12 +00:00
lukaszraczylo 3a6403c30b fix(ratelimit): bound memory and CPU per request 
The sustained gate stored one entry for every attempt, denied ones too, and summed all entries on each request. A flood grew memory with rate times interval and made each request slower. Both gates now keep only the newest limit plus one attempt times. A Lean proof shows this decides the same as the full count. One check dropped from 29,502 ns and 11 allocations to 43 ns and none. The go-ratecounter dependency is gone.
 2026-11-03 00:55:35 +00:00
github-actions[bot]andGitHub a0a8283b52 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-02 03:04:09 +00:00
github-actions[bot]andGitHub cf4f2785e2 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-11-01 03:04:09 +00:00
github-actions[bot]andGitHub 6be1194ff7 chore(deps): update module github.com/gookit/goutil to v0.8.6 
Automated dependency update. All tests passed.
 2026-10-31 03:04:59 +00:00
github-actions[bot]andGitHub 1dcff9d2e2 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-30 03:05:15 +00:00
github-actions[bot]andGitHub 523fc6222d chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-29 03:04:49 +00:00
github-actions[bot]andGitHub 8456860dbe chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-27 03:06:19 +00:00
github-actions[bot]andGitHub 5fa78e0fe8 chore(deps): update module github.com/gofiber/contrib/v3/websocket to v1.2.9 
Automated dependency update. All tests passed.
 2026-10-25 03:04:34 +00:00
github-actions[bot]andGitHub 54b83df04f chore(deps): update module github.com/gofiber/schema to v1.9.0 
Automated dependency update. All tests passed.
 2026-10-23 03:05:32 +00:00
github-actions[bot]andGitHub 899f71f4aa chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-21 03:05:20 +00:00
github-actions[bot]andGitHub 9ee213a018 chore(deps): update module github.com/philhofer/fwd to v1.2.1 
Automated dependency update. All tests passed.
 2026-10-19 03:04:59 +00:00
github-actions[bot]andGitHub b37ce3361d chore(deps): update module github.com/gofiber/contrib/v3/websocket to v1.2.8 
Automated dependency update. All tests passed.
 2026-10-18 03:05:31 +00:00
github-actions[bot]andGitHub a8901321aa chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-17 03:05:01 +00:00
github-actions[bot]andGitHub 5febeabbf2 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-15 03:05:20 +00:00
github-actions[bot]andGitHub d32f8f2be5 chore(deps): update module github.com/molecule-man/go-brrr to v1.3.0 
Automated dependency update. All tests passed.
 2026-10-14 03:05:03 +00:00
github-actions[bot]andGitHub 0e1d22f4e7 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-13 03:10:48 +00:00
github-actions[bot]andGitHub 7d3b77806a chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-12 03:15:59 +00:00
github-actions[bot]andGitHub c2a9f6553f chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-11 03:09:58 +00:00
github-actions[bot]andGitHub 1a6bc71114 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-10 03:09:24 +00:00
github-actions[bot]andGitHub e5295a6f56 chore(deps): update module github.com/mattn/go-colorable to v0.1.16 
Automated dependency update. All tests passed.
 2026-10-09 03:09:16 +00:00
github-actions[bot]andGitHub e99647e346 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-08 03:08:47 +00:00
github-actions[bot]andGitHub 73962d0c9a chore(deps): update module github.com/molecule-man/go-brrr to v1.2.0 
Automated dependency update. All tests passed.
 2026-10-06 03:05:56 +00:00
github-actions[bot]andGitHub b0c113f443 chore(deps): update dependencies 
Automated dependency update. All tests passed.
 2026-10-04 10:56:46 +00:00
lukaszraczylo abb79535d1 fix(deps): update go-ratecounter to v0.1.13 
Version 0.1.12 had a data race between addValue and cleanUpOldValues. The
race detector in CI reported it in the burst test. Version 0.1.13 copies
the pooled values and the race is gone.
 2026-10-04 11:52:14 +01:00
lukaszraczylo 4d87dee2c6 fix(deps): update sony/gobreaker to v2 
The v2 module path is github.com/sony/gobreaker/v2 and the breaker is
generic. The code instantiates it with any, which matches the v1
Execute signature.
 2026-10-04 10:16:43 +01:00
lukaszraczylo 02780d942c fix(deps): update avast/retry-go to v5 
The v5 API replaces retry.Do(fn, opts...) with retry.New(opts...).Do(fn).
The retry call in proxy.go uses the new form with the same options.
 2026-10-04 10:15:21 +01:00
lukaszraczyloandGitHub f93a0e2865 Update go.mod and go.sum (#103) 2026-10-03 04:14:32 +01:00
lukaszraczyloandGitHub 90a6b99bb3 Update go.mod and go.sum (#102) 2026-10-02 04:04:16 +01:00
lukaszraczyloandGitHub 503d09f479 Update go.mod and go.sum (#101) 2026-10-01 04:07:38 +01:00
lukaszraczyloandGitHub dc034fb0c7 Update go.mod and go.sum (#100) 2026-09-30 04:04:34 +01:00
lukaszraczyloandGitHub 6554da0d04 Update go.mod and go.sum (#99) 2026-09-29 04:03:21 +01:00
lukaszraczyloandGitHub 819a8e2315 Update go.mod and go.sum (#98) 2026-09-28 04:05:44 +01:00
lukaszraczyloandGitHub 85531966fe Update go.mod and go.sum (#96) 2026-09-26 04:03:07 +01:00
lukaszraczyloandGitHub af2f5d2f96 Update go.mod and go.sum (#95) 2026-09-25 04:03:16 +01:00
lukaszraczyloandGitHub b8f01567b7 Update go.mod and go.sum (#94) 2026-09-24 04:02:30 +01:00
lukaszraczyloandGitHub 8cf525c924 Update go.mod and go.sum (#93) 2026-09-22 04:02:34 +01:00
lukaszraczyloandGitHub cc35d3fc38 Update go.mod and go.sum (#92) 2026-09-19 04:03:22 +01:00
lukaszraczyloandGitHub 5882042a9d Update go.mod and go.sum (#91) 2026-09-18 04:02:26 +01:00
lukaszraczyloandGitHub e0ad34c513 Update go.mod and go.sum (#90) 2026-09-16 04:03:13 +01:00
lukaszraczyloandGitHub aa5167c42b Update go.mod and go.sum (#89) 2026-09-15 04:02:28 +01:00
lukaszraczyloandGitHub e2d151e9b7 Update go.mod and go.sum (#88) 2026-09-13 04:02:14 +01:00
lukaszraczylo 02d9796adb fix(deps): update dependencies and allow loopback upstreams on fiber v3.5.0 
Update all direct and indirect Go dependencies. Notable bumps are
gofiber/fiber v3.4.0 to v3.5.0, gofiber/contrib websocket v1.2.0 to
v1.2.6, fasthttp v1.72.0 to v1.74.0, gookit/goutil v0.7.6 to v0.8.0,
go-redis v9.20.1 to v9.22.0, pgx v5.10.0 to v5.11.0, OpenTelemetry
v1.44.0 to v1.46.0, grpc v1.82.1 to v1.83.2 and testify v1.11.1 to
v1.12.1. The go directive moves to 1.26.0 because websocket v1.2.6
requires it.

fiber v3.5.0 adds an SSRF dial guard to clients registered with
proxy.WithClient. The guard rejects loopback and private upstreams by
default. This proxy gets its upstream from operator configuration, and
sidecar deployments point it at localhost. Set
proxy.SecurityPolicy{AllowPrivateIPs: true} so these upstreams keep
working. This change also unblocks the nightly autoupdate workflow,
which failed on this guard.

Claude-Session: https://claude.ai/code/session_01Fu2wXqGUrfVBi5aLafKk8U
 2026-09-10 15:18:31 +01:00
lukaszraczylo 6e571f8fa0 fix(deps): bump gofiber/fiber to v3.4.0 for HSTS advisory fix (GHSA-gv83-gqw6-9j2c) 
Fiber v3.3.0 and earlier never set the HSTS header in the helmet middleware (GHSA-gv83-gqw6-9j2c, GO-2026-5912). Version v3.4.0 fixes that and adds an open-redirect fix and X-Forwarded-For hardening. Version v3.4.0 does NOT contain the loopback SSRF block that v3.5.0 added to the proxy middleware, so the 127.0.0.1 backend behaviour is unchanged. The full race test suite, including the loopback proxy tests, passes. Transitive bumps: fasthttp v1.71.0 to v1.72.0, klauspost/compress to v1.19.0.
 2026-08-17 19:47:30 +01:00