chore(deps): bump github.com/threatwinds/go-sdk from 1.1.15 to 1.1.21 in /plugins/geolocation

Closed

Number: #2064
Type: Pull Request
State: Closed

Author:

dependabot[bot]
Association: Unknown
Comments: 1

Created: May 15, 2026 at 01:39 PM UTC
(25 days ago)

Updated: May 16, 2026 at 07:19 AM UTC
(24 days ago)

Closed: May 16, 2026 at 07:19 AM UTC
(24 days ago)

Time to Close: about 18 hours

Labels:
dependencies go

Description:

Bumps github.com/threatwinds/go-sdk from 1.1.15 to 1.1.21.

Commits

0cf3a28 refactor(catcher): use AbortWithStatusJSON and deduplicate status logic in Gi...
4624fdf feat(catcher): add JSON error response body to GinError
86df32e test(catcher): add tests for JSON error response body in GinError
570d12f docs: add design spec for standard error response body in GinError
8d49c2a fix(deps): bump google.golang.org/grpc to v1.80.0 (CVE-2026-33186)
be7214f chore(deps): bump golang.org/x/{crypto,text,net,sys,arch} via go mod tidy
ab156a2 feat: Add MaxEntityAttrLength constant for string validation
fd84b47 fix(os): use seq_no and primary_term for ISM policy updates
4895c83 feat(os): make AddCreate work without docID for data streams
1ec769d feat(os): add data stream support to TemplateBuilder
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Package Dependencies

Package:
github.com/threatwinds/go-sdk

Ecosystem:
go

Version Change:
1.1.15 → 1.1.21

Update Type:
Patch

Path:
/plugins/geolocation

Security Advisories

gRPC-Go has an authorization bypass via missing leading slash in :path

GHSA-p77j-4mvh-x3m3 CVE-2026-33186 CRITICAL

### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of the HTTP/2 `:path` pseudo-header. The gRPC-Go ser...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`15816520`
UUID:	`4454338659`
Node ID:	`PR_kwDOKVqxZ87b7481`
Host:	GitHub
Repository:	utmstack/UTMStack

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Dependabot