What the developer wrote
Authored by Olaoluwa Osuntokun
build: update to actor v0.0.6
What changed, and why it matters
This commit simply updates a Go module dependency called 'actor' from version 0.0.5 to 0.0.6 and removes a temporary local override. It is a routine build/maintenance change with no visible security implications in the diff itself.
No immediate security action is required based on this commit alone. If the actor v0.0.6 release contains security fixes, review its release notes or changelog separately.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates github.com/lightningnetwork/lnd/actor from v0.0.5 to v0.0.6 in go.mod and adds the corresponding checksums to go.sum. It also removes a replace directive that pointed to a local ./actor directory, which had been used to pick up new helpers (CompleteWith/AwaitFuture) during a migration. The actual code changes in the actor module are not included in this commit, so no specific security issue can be assessed from the diff alone.
Changed components
go.modgo.sumgithub.com/lightningnetwork/lnd/actor dependencyInspect captured patch +3 / −5
diff --git a/go.mod b/go.mod
index 7b44ded..8457d8a 100644
--- a/go.mod
+++ b/go.mod
@@ -33,7 +33,7 @@ require (
github.com/lightninglabs/neutrino v0.16.2
github.com/lightninglabs/neutrino/cache v1.1.3
github.com/lightningnetwork/lightning-onion v1.3.0
- github.com/lightningnetwork/lnd/actor v0.0.5
+ github.com/lightningnetwork/lnd/actor v0.0.6
github.com/lightningnetwork/lnd/cert v1.2.2
github.com/lightningnetwork/lnd/clock v1.1.1
github.com/lightningnetwork/lnd/fn/v2 v2.0.9
@@ -210,10 +210,6 @@ replace github.com/lightningnetwork/lnd/queue => ./queue
// TODO(elle): remove once the gossip V2 sqldb changes have been made.
replace github.com/lightningnetwork/lnd/sqldb => ./sqldb
-// Use local actor module to pick up CompleteWith/AwaitFuture helpers added
-// as part of the discovery errChan -> Future[error] migration.
-replace github.com/lightningnetwork/lnd/actor => ./actor
-
// This replace is for https://github.com/advisories/GHSA-25xm-hr59-7c27
replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.11
diff --git a/go.sum b/go.sum
index e99d976..99ae508 100644
--- a/go.sum
+++ b/go.sum
@@ -374,6 +374,8 @@ github.com/lightninglabs/protobuf-go-hex-display v1.33.0-hex-display h1:Y2WiPkBS
github.com/lightninglabs/protobuf-go-hex-display v1.33.0-hex-display/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
github.com/lightningnetwork/lightning-onion v1.3.0 h1:FqILgHjD6euc/Muo1VOzZ4+XDPuFnw6EYROBq0rR/5c=
github.com/lightningnetwork/lightning-onion v1.3.0/go.mod h1:nP85zMHG7c0si/eHBbSQpuDCtnIXfSvFrK3tW6YWzmU=
+github.com/lightningnetwork/lnd/actor v0.0.6 h1:Ge8N2wivARG+27qJBwTlB0vwsypStZYZy8vk4Zl38sU=
+github.com/lightningnetwork/lnd/actor v0.0.6/go.mod h1:YAsoniSbY/cAM9HTVNfZLvt7RI6swDxy6wzPspTcMZg=
github.com/lightningnetwork/lnd/cert v1.2.2 h1:71YK6hogeJtxSxw2teq3eGeuy4rHGKcFf0d0Uy4qBjI=
github.com/lightningnetwork/lnd/cert v1.2.2/go.mod h1:jQmFn/Ez4zhDgq2hnYSw8r35bqGVxViXhX6Cd7HXM6U=
github.com/lightningnetwork/lnd/clock v1.1.1 h1:OfR3/zcJd2RhH0RU+zX/77c0ZiOnIMsDIBjgjWdZgA0=
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.