fix(deps): Update module github.com/sirupsen/logrus to v1.8.3 [SECURITY]

[cq-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sirupsen/logrus	require	minor	v1.4.2 -> v1.8.3

GitHub Vulnerability Alerts

CVE-2025-65637

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.

---

Release Notes

sirupsen/logrus (github.com/sirupsen/logrus)

v1.8.3

Compare Source

What's Changed

• Add instructions to use different log levels for local and syslog by @​tommyblue in https://github.com/sirupsen/logrus/pull/1372
• This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @​ozfive in https://github.com/sirupsen/logrus/pull/1376
• Use text when shows the logrus output by @​xieyuschen in https://github.com/sirupsen/logrus/pull/1339

New Contributors

• @​tommyblue made their first contribution in https://github.com/sirupsen/logrus/pull/1372
• @​ozfive made their first contribution in https://github.com/sirupsen/logrus/pull/1376
• @​xieyuschen made their first contribution in https://github.com/sirupsen/logrus/pull/1339

Full Changelog: sirupsen/logrus@v1.8.2...v1.8.3

v1.8.2

Compare Source

What's Changed

• CI: use GitHub Actions by @​thaJeztah in https://github.com/sirupsen/logrus/pull/1239
• go.mod: github.com/stretchr/testify v1.7.0 by @​thaJeztah in https://github.com/sirupsen/logrus/pull/1246
• Change godoc badge to pkg.go.dev badge by @​minizilla in https://github.com/sirupsen/logrus/pull/1249
• Add support for the logger private buffer pool. by @​edoger in https://github.com/sirupsen/logrus/pull/1253
• bump golang.org/x/sys depency version by @​dgsb in https://github.com/sirupsen/logrus/pull/1280
• Update README.md by @​runphp in https://github.com/sirupsen/logrus/pull/1266
• indicates issues as stale automatically by @​dgsb in https://github.com/sirupsen/logrus/pull/1281
• ci: add go 1.17 to test matrix by @​anajavi in https://github.com/sirupsen/logrus/pull/1277
• reduce the list of cross build target by @​dgsb in https://github.com/sirupsen/logrus/pull/1282
• Improve Log methods documentation by @​dgsb in https://github.com/sirupsen/logrus/pull/1283
• fix race condition for SetFormatter and SetReportCaller by @​rubensayshi in https://github.com/sirupsen/logrus/pull/1263
• bump version of golang.org/x/sys dependency by @​nathanejohnson in https://github.com/sirupsen/logrus/pull/1333
• update gopkg.in/yaml.v3 to v3.0.1 by @​izhakmo in https://github.com/sirupsen/logrus/pull/1337
• update dependencies by @​dgsb in https://github.com/sirupsen/logrus/pull/1343
• Fix data race in hooks.test package by @​FrancoisWagner in https://github.com/sirupsen/logrus/pull/1362

New Contributors

• @​minizilla made their first contribution in https://github.com/sirupsen/logrus/pull/1249
• @​edoger made their first contribution in https://github.com/sirupsen/logrus/pull/1253
• @​runphp made their first contribution in https://github.com/sirupsen/logrus/pull/1266
• @​anajavi made their first contribution in https://github.com/sirupsen/logrus/pull/1277
• @​rubensayshi made their first contribution in https://github.com/sirupsen/logrus/pull/1263
• @​nathanejohnson made their first contribution in https://github.com/sirupsen/logrus/pull/1333
• @​izhakmo made their first contribution in https://github.com/sirupsen/logrus/pull/1337
• @​FrancoisWagner made their first contribution in https://github.com/sirupsen/logrus/pull/1362

Full Changelog: sirupsen/logrus@v1.8.1...v1.8.2

v1.8.1

Compare Source

v1.8.0

Compare Source

Correct versioning number replacing v1.7.1

v1.7.1

Compare Source

Code quality:

• use go 1.15 in travis
• use magefile as task runner

Fixes:

• small fixes about new go 1.13 error formatting system
• Fix for long time race condiction with mutating data hooks

Features:

• build support for zos

v1.7.0: Add new BufferPool and LogFunction APIs

Compare Source

• a new buffer pool management API has been added
• a set of <LogLevel>Fn() functions have been added
• the dependency toward a windows terminal library has been removed

v1.6.0

Compare Source

Release v1.6.0

v1.5.0

Compare Source

This new release introduces:

• Ability to DisableHTMLEscape when using the JSON formatter: https://github.com/sirupsen/logrus/pull/524
• Support/fixes for go 1.14
• Many many bugfixes

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.