fix(security): remediate CVE-2025-65637 - upgrade logrus to v1.9.3

[Ompragash]

🔐 Security Remediation — Vigil Automated CVE Fix

Scan Date: 2026-04-07
Repo: drone-plugins/drone-s3
Triggered by: Vigil Security Remediation Agent

---

Patched CVEs

CVE	Severity	Package	Old Version	New Version	CVSS
CVE-2025-65637	HIGH	github.com/sirupsen/logrus	v1.9.0	v1.9.3	8.7

CVE-2025-65637 — Details

• Vulnerability: Denial-of-Service via Entry.Writer() when logging payloads >64KB without newline characters. Causes token too long error, closes the writer pipe, and leads to application unavailability.
• CWE: CWE-400 (Uncontrolled Resource Consumption)
• Advisory: Error while reading from Writer: bufio.Scanner: token too long sirupsen/logrus#1370
• Fix: Upgraded github.com/sirupsen/logrus from v1.9.0 to v1.9.3

---

Unfixed CVEs (No Patch Available)

None — all detected HIGH/CRITICAL CVEs have been remediated.

---

Changes Made

• go.mod — bumped github.com/sirupsen/logrus from v1.9.0 to v1.9.3
• go.sum — regenerated checksums via go mod tidy
• Dockerfile — not present in repository; no changes required

---

Test Results

✅ go test ./... — PASSED
ok github.com/drone-plugins/drone-s3 0.005s

---

🤖 This PR was automatically generated by Vigil, the Harness security remediation agent.
Do not merge without reviewing the changes. Manual approval required.