go.mod: bump dependencies to latest version #312
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
invidian
reviewed
Aug 17, 2021
| github.com/pkg/sftp v1.10.1 | ||
| golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586 | ||
| golang.org/x/text v0.3.3 | ||
| github.com/pkg/sftp v1.13.1 |
There was a problem hiding this comment.
This also fixes a security vulnerability marked by Snyk, which has been fixed in v1.11.0.
invidian
added a commit
to newrelic/nri-discovery-kubernetes
that referenced
this pull request
Aug 17, 2021
To fix snyk security scan. Upstream update is pending here: spf13/afero#312 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
invidian
added a commit
to newrelic/nri-discovery-kubernetes
that referenced
this pull request
Aug 30, 2021
To fix snyk security scan. Upstream update is pending here: spf13/afero#312 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
invidian
added a commit
to newrelic/nri-discovery-kubernetes
that referenced
this pull request
Sep 2, 2021
* Make golangci.yml effective again Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * internal/utils: remove dead code Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * internal: fix found linter warnings After making linter configuration effective, linter popped up new issues. This commit addresses them in a minimal way. Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * Hide goreleaser.yml file As usually it is hidden. Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * Update Go Kubernetes modules to v1.22.0 As part of #45 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * go.mod: update viper to latest version Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * go.mod: update nri-kubernetes to latest version Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * .github/workflows/push_pr.yml: fix link to Kubernetes releases Previous link now redirects to new link and old link will be not available by the end of this year. Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * deploy: make manifests compatible with Kubernetes v1.22+ As part of #45. Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * .github/workflows/push_pr.yml: test against Kubernetes v1.22.X Closes #45 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * .golangci.yml: increase timeout Closes #38 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * go.mod: force-update github.com/pkg/sftp to latest version To fix snyk security scan. Upstream update is pending here: spf13/afero#312 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * .github/workflows/push_pr.yml: drop support for Kubernetes v1.15 Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com> * .github/workflows/push_pr.yml: bump patch versions for Kubernetes Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
github.com/pkg/sftp to v1.13.1 (this fixes a security vulnerability) golang.org/x/crypto to v0.0.0-20211108221036-ceb1ce70b4fa golang.org/x/text to v0.3.7
|
Updated to the latest versions of all dependencies as of today: github.com/pkg/sftp to v1.13.1 (this fixes a security vulnerability as pointed out by @invidian) Could one of the maintainers please take a look? /cc @spf13 @Kargakis |
0xmichalis
approved these changes
Nov 10, 2021
This was referenced Nov 10, 2021
Closed
This was referenced Nov 10, 2021
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.