From d503b699c4b4aa9a6c7410bacc2b64368e3dbb64 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Sep 2022 18:45:29 +0000 Subject: [PATCH 1/2] build(deps): bump github.com/polyfloyd/go-errorlint from 1.0.4 to 1.0.5 Bumps [github.com/polyfloyd/go-errorlint](https://github.com/polyfloyd/go-errorlint) from 1.0.4 to 1.0.5. - [Release notes](https://github.com/polyfloyd/go-errorlint/releases) - [Commits](https://github.com/polyfloyd/go-errorlint/compare/v1.0.4...v1.0.5) --- updated-dependencies: - dependency-name: github.com/polyfloyd/go-errorlint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 1e7b8fe80eb1..0252541c0d3f 100644 --- a/go.mod +++ b/go.mod @@ -73,7 +73,7 @@ require ( github.com/nishanths/exhaustive v0.8.3 github.com/nishanths/predeclared v0.2.2 github.com/pkg/errors v0.9.1 - github.com/polyfloyd/go-errorlint v1.0.4 + github.com/polyfloyd/go-errorlint v1.0.5 github.com/quasilyte/go-ruleguard/dsl v0.3.21 github.com/ryancurrah/gomodguard v1.2.4 github.com/ryanrolds/sqlclosecheck v0.3.0 diff --git a/go.sum b/go.sum index b820eb6aa1e2..07236dab088b 100644 --- a/go.sum +++ b/go.sum @@ -417,8 +417,8 @@ github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINE github.com/pkg/sftp v1.13.1/go.mod h1:3HaPG6Dq1ILlpPZRO0HVMrsydcdLt6HRDccSgb87qRg= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= -github.com/polyfloyd/go-errorlint v1.0.4 h1:hs1Szew6pUZKMTzGUjtNP4kPORHbzWB/UHPZbU2MQLs= -github.com/polyfloyd/go-errorlint v1.0.4/go.mod h1:APVvOesVSAnne5SClsPxPdfvZTVDojXh1/G3qb5wjGI= +github.com/polyfloyd/go-errorlint v1.0.5 h1:AHB5JRCjlmelh9RrLxT9sgzpalIwwq4hqE8EkwIwKdY= +github.com/polyfloyd/go-errorlint v1.0.5/go.mod h1:APVvOesVSAnne5SClsPxPdfvZTVDojXh1/G3qb5wjGI= github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c h1:ncq/mPwQF4JjgDlrVEn3C11VoGHZN7m8qihwgMEtzYw= github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE= github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw= From 860ce4246442d44971b7e6b4b8d4684b2d9ff394 Mon Sep 17 00:00:00 2001 From: Fernandez Ludovic Date: Fri, 30 Sep 2022 20:51:37 +0200 Subject: [PATCH 2/2] nancy ignore --- .nancy-ignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.nancy-ignore b/.nancy-ignore index b0046f8dea36..8496832e9804 100644 --- a/.nancy-ignore +++ b/.nancy-ignore @@ -14,6 +14,7 @@ CVE-2020-26160 # golang/github.com/hashicorp/consul/sdk@v0.8.0 CVE-2022-29153 CVE-2022-24687 +CVE-2021-41803 # Skip for indirect dependencies golang/github.com/valyala/fasthttp@v1.30.0 CVE-2022-21221