build(deps): pin betterleaks to 1.5.0 (1.6.1 has data race) · Entire

build(deps): pin betterleaks to 1.5.0 (1.6.1 has data race)

754e704→main·

betterleaks 1.6.1 swapped its expr engine (cel-go -> expr-lang/expr) and the new internal/exprruntime shares a *runtimeBindings pointer across goroutines: evalBindings clones the bindings map but not __runtime, so concurrent EvalFilter calls race writing rt.tokenizer (runtime.go:208).

Our redact package calls Detect concurrently under -race, so every redact test fails with "race detected". Repro'd locally; fixed by reverting to 1.5.0 (cel-go engine). v1.6.1 is the latest release, no upstream fix yet.

Keeps the other 4 group bumps (x/mod, x/sync, x/sys, x/term).

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

Sessions

01KX3B27XN9XRJ9KD5S077FXHBView transcript

[?
Repository Mirror List Command EnhancementClaude Code·Opus 4.8[1m]·8 steps](/content/gh/entireio/cli/session/720f6b47-08c0-41d4-9bde-e278935e7c15#timeline-01KX3B27XN9XRJ9KD5S077FXHB/index.html)

Changes

Mgo.mod+8/-3
Mgo.sum+16/-6

7 unmodified lines

8
9
10
11
11
12
13
14
27 unmodified lines

42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
18 unmodified lines

76
77
78
76
79
80
81
5 unmodified lines

87
88
89
90
91
92
93
23 unmodified lines

117
118
119
117
120
121
122
12 unmodified lines

135
136
137
138
139
140
141
142

7 unmodified lines

charm.land/glamour/v2 v2.0.1
    charm.land/huh/v2 v2.0.3
    charm.land/lipgloss/v2 v2.0.5
    github.com/betterleaks/betterleaks v1.6.1
    github.com/betterleaks/betterleaks v1.5.0
    github.com/charmbracelet/x/ansi v0.11.7
    github.com/creack/pty v1.1.24
    github.com/denisbrodbeck/machineid v1.0.1
27 unmodified lines

)

require (
    cel.dev/expr v0.25.1 // indirect
    dario.cat/mergo v1.0.2 // indirect
    github.com/BobuSumisu/aho-corasick v1.0.3 // indirect
    github.com/Masterminds/semver/v3 v3.4.0 // indirect
    github.com/Microsoft/go-winio v0.6.2 // indirect
    github.com/ProtonMail/go-crypto v1.4.1 // indirect
    github.com/STARRY-S/zip v0.2.3 // indirect
    github.com/alecthomas/chroma/v2 v2.14.0 // indirect
    github.com/andybalholm/brotli v1.2.1 // indirect
    github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
    github.com/atotto/clipboard v0.1.4 // indirect
    github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
    github.com/aymerick/douceur v0.2.0 // indirect
18 unmodified lines

github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
    github.com/dustin/go-humanize v1.0.1 // indirect
    github.com/emirpasic/gods v1.18.1 // indirect
    github.com/expr-lang/expr v1.17.8 // indirect
    github.com/fatih/color v1.19.0 // indirect
    github.com/fatih/semgroup v1.2.0 // indirect
    github.com/ghodss/yaml v1.0.0 // indirect
5 unmodified lines

github.com/go-sprout/sprout v1.0.3 // indirect
    github.com/goccy/go-json v0.10.5 // indirect
    github.com/godbus/dbus/v5 v5.2.2 // indirect
    github.com/google/cel-go v0.27.0 // indirect
    github.com/google/go-github/v72 v72.0.0 // indirect
    github.com/google/go-querystring v1.1.0 // indirect
    github.com/gorilla/css v1.0.1 // indirect
23 unmodified lines

github.com/pkoukk/tiktoken-go v0.1.8 // indirect
    github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
    github.com/rivo/uniseg v0.4.7 // indirect
    github.com/rrethy/ahocorasick v1.0.0 // indirect
    github.com/rs/zerolog v1.33.0 // indirect
    github.com/segmentio/asm v1.2.1 // indirect
    github.com/shopspring/decimal v1.4.0 // indirect
12 unmodified lines

go4.org v0.0.0-20260112195520-a5071408f32f // indirect
    golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa // indirect
    golang.org/x/text v0.38.0 // indirect
    google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
    google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
    google.golang.org/protobuf v1.36.11 // indirect
    gopkg.in/yaml.v2 v2.4.0 // indirect
)

Mgo.mod+8/-3

1
2
3
4
5
6 unmodified lines

12
13
14
15
16
17
18
19
14 unmodified lines

34
35
36
37
38
39
40
41
4 unmodified lines

46
47
48
43
44
49
50
51
52
53
57 unmodified lines

111
112
113
108
109
114
115
116
37 unmodified lines

154
155
156
157
158
159
160
161
89 unmodified lines

251
252
253
248
249
254
255
256
76 unmodified lines

333
334
335
336
337
338
339
340
341
342
343
344

cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4=
cel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=
charm.land/bubbles/v2 v2.1.1 h1:7r55WzBxpo/R3z98hGmY7KKPd3ET6vsf0Fb9sDHOV60=
charm.land/bubbles/v2 v2.1.1/go.mod h1:GE6M31gaWZVXzGw73OeuTTgy4lX+OtkH0E5ymnNsHxo=
charm.land/bubbletea/v2 v2.0.8 h1:SxTJMhCAI3lbPmy4SgX5LWZ24AdINr4I6UEqzZvYJuY=
6 unmodified lines

charm.land/lipgloss/v2 v2.0.5/go.mod h1:9oqhxt4yxIMe6q5A4kHr44DremZk7J9UNh74GlWa5nc=
dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8=
dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA=
github.com/BobuSumisu/aho-corasick v1.0.3 h1:uuf+JHwU9CHP2Vx+wAy6jcksJThhJS9ehR8a+4nPE9g=
github.com/BobuSumisu/aho-corasick v1.0.3/go.mod h1:hm4jLcvZKI2vRF2WDU1N4p/jpWtpOzp3nLmi9AzX/XE=
github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
github.com/MakeNowJust/heredoc v1.0.0/go.mod h1:mG5amYoWBHf8vpLOuehzbGGw0EHxpZZ6lCpQ4fNJ8LE=
github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0=
14 unmodified lines

github.com/andybalholm/brotli v1.2.1/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY=
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw=
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
github.com/atotto/clipboard v0.1.4 h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4=
4 unmodified lines

github.com/aymanbagabas/go-udiff v0.4.1/go.mod h1:0L9PGwj20lrtmEMeyw4WKJ/TMyDtvAoK9bf2u/mNo3w=
github.com/aymerick/douceur v0.2.0 h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk=
github.com/aymerick/douceur v0.2.0/go.mod h1:wlT5vV2O3h55X9m7iVYN0TBM0NH/MmbLnd30/FjWUq4=
github.com/betterleaks/betterleaks v1.6.1 h1:ZSnqAMwvIudpeHxzbBu8LlAwV/T8Ty2ygrJDtC4IBiQ=
github.com/betterleaks/betterleaks v1.6.1/go.mod h1:VxY1tDWcVg0+WNrzM+Qng8zJq7Np5zXAkxOc0/LxCAE=
github.com/betterleaks/betterleaks v1.5.0 h1:Fk0ZILLAhqtgOyhq6gtPsUnPs9n8um/SM7e00qcRit0=
github.com/betterleaks/betterleaks v1.5.0/go.mod h1:KPCdzwy4xT6r7oZCmDTNIlKNeim6XEvAH5vE1f0vG0w=
github.com/bodgit/plumbing v1.3.0 h1:pf9Itz1JOQgn7vEOE7v7nlEfBykYqvUYioC61TwWCFU=
github.com/bodgit/plumbing v1.3.0/go.mod h1:JOTb4XiRu5xfnmdnDJo6GmSbSbtSyufrsyZFByMtKEs=
github.com/bodgit/sevenzip v1.6.2 h1:6/0mwj5KaRXpuf9iSiE+VpG7VpzFJ8D60P53VjxRv34=
57 unmodified lines

github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
github.com/entireio/auth-go v0.5.2 h1:z0deFLJiBQH3ROMo/Z/YE2HcJ6W2SxZO5RVn2feQIPM=
github.com/entireio/auth-go v0.5.2/go.mod h1:eqFYgiNSBw6HXYR3j8DRW0/WTV1dX3SWxr2D6YCYNQ0=
github.com/expr-lang/expr v1.17.8 h1:W1loDTT+0PQf5YteHSTpju2qfUfNoBt4yw9+wOEU9VM=
github.com/expr-lang/expr v1.17.8/go.mod h1:8/vRC7+7HBzESEqt5kKpYXxrxkr31SaO8r40VO/1IT4=
github.com/fatih/color v1.19.0 h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w=
github.com/fatih/color v1.19.0/go.mod h1:zNk67I0ZUT1bEGsSGyCZYZNrHuTkJJB+r6Q9VuMi0LE=
github.com/fatih/semgroup v1.2.0 h1:h/OLXwEM+3NNyAdZEpMiH1OzfplU09i2qXPVThGZvyg=
37 unmodified lines

github.com/godbus/dbus/v5 v5.2.2/go.mod h1:3AAv2+hPq5rdnr5txxxRwiGjPXamgoIHgz9FPBfOp3c=
github.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=
github.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=
github.com/google/cel-go v0.27.0 h1:e7ih85+4qVrBuqQWTW4FKSqZYokVuc3HnhH5keboFTo=
github.com/google/cel-go v0.27.0/go.mod h1:tTJ11FWqnhw5KKpnWpvW9CJC3Y9GK4EIS0WXnBbebzw=
github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
89 unmodified lines

github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
github.com/rrethy/ahocorasick v1.0.0 h1:YKkCB+E5PXc0xmLfMrWbfNht8vG9Re97IHSWZk/Lk8E=
github.com/rrethy/ahocorasick v1.0.0/go.mod h1:nq8oScE7Vy1rOppoQxpQiiDmPHuKCuk9rXrNcxUV3R0=
github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg=
github.com/rs/zerolog v1.33.0 h1:1cU2KZkvPxNyfgEmhHAz/1A9Bz+llsdYzklWFzgp0r8=
github.com/rs/zerolog v1.33.0/go.mod h1:/7mN4D5sKwJLZQ2b/znpjC3/GQWY/xaDXUM0kKWRHss=
76 unmodified lines

golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=
golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4=
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 h1:fCvbg86sFXwdrl5LgVcTEvNC+2txB5mgROGmRL5mrls=
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto=
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b h1:Mv8VFug0MP9e5vUxfBcE3vUkV6CImK3cMNMIDFjmzxU=
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=