fix: upgrade logrus to v1.9.3 to remediate CVE-2025-65637 (retry)

[Ompragash]

Security Fix: CVE-2025-65637 (HIGH) — logrus DoS Vulnerability

Summary

This PR upgrades github.com/sirupsen/logrus from v1.9.0 to v1.9.3 to remediate CVE-2025-65637.

Note: A previous fix PR (#216, branch fix/cve-2025-65637-logrus-v1.9.3) was opened on 2026-04-07 but was never merged into master. This PR reapplies the same fix targeting the current master branch.

---

Patched CVEs

CVE	Severity	Package	Old Version	Fixed Version	CVSS
CVE-2025-65637	HIGH	github.com/sirupsen/logrus	v1.9.0	v1.9.3	8.7

Description: Denial-of-Service vulnerability in logrus Entry.Writer(). When processing single-line payloads exceeding 64KB without newline characters, bufio.Scanner fails with a "token too long" error, causing the writer pipe to close and the application to become unavailable.

Advisory: https://github.com/sirupsen/logrus/security/advisories

---

Informational (no fix available)

OSV ID	Severity	Package	Notes
GO-2022-0635	UNKNOWN	aws-sdk-go v1.48.0	No fix version available
GO-2022-0646	UNKNOWN	aws-sdk-go v1.48.0	No fix version available

---

Changes

• go.mod: github.com/sirupsen/logrus upgraded from v1.9.0 to v1.9.3
• go.sum: regenerated via go mod tidy
• No Dockerfile present - no image changes required

Tests

• OK go test ./... passed (ok github.com/drone-plugins/drone-s3 0.004s)

---

Opened by Vigil Security Remediation Agent - 2026-04-08 18:31 UTC