Bump go-kit to 0.12.0 #3699
Closed
Bump go-kit to 0.12.0 #3699
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
go-kit 0.11.0 has a dependency on github.com/dgrijalva/jwt-go which has a few vulns. Namely dgrijalva/jwt-go#428. go-kit switched to the properly maintained fork in go-kit/kit#1026 so this commit bumps up to 0.12.0 in order to pick up that change and remove the dependency on the vulnerable lib Signed-off-by: Colin Douch <iam@colindou.ch>
Codecov Report
@@ Coverage Diff @@
## main #3699 +/- ##
==========================================
+ Coverage 97.34% 97.35% +0.01%
==========================================
Files 268 268
Lines 15745 15745
==========================================
+ Hits 15327 15329 +2
+ Misses 330 328 -2
Partials 88 88
Continue to review full report at Codecov.
|
|
please resubmit the PR from a non-main branch in your fork, otherwise it would not pass the CI |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
go-kit 0.11.0 has a dependency on github.com/dgrijalva/jwt-go which has
a few vulns. Namely dgrijalva/jwt-go#428.
go-kit switched to the properly maintained fork in
go-kit/kit#1026 so this commit bumps up to
0.12.0 in order to pick up that change and remove the dependency on the
vulnerable lib
Short description of the changes