Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go modules #664

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

hienvanhuynh
Copy link
Contributor

cloud.google.com/go/compute v1.23.0
github.com/armon/go-metrics v0.4.1
github.com/digitalocean/godo v1.82.0
github.com/docker/go-units v0.5.0
github.com/emicklei/go-restful/v3 v3.8.0
github.com/envoyproxy/go-control-plane v0.11.1
github.com/envoyproxy/protoc-gen-validate v1.0.2
github.com/go-openapi/jsonpointer v0.19.6
github.com/go-openapi/jsonreference v0.20.1
github.com/go-openapi/swag v0.22.3
github.com/go-zookeeper/zk v1.0.3
github.com/googleapis/enterprise-certificate-proxy v0.2.5
github.com/googleapis/gax-go/v2 v2.12.0
github.com/gorilla/websocket v1.5.0
github.com/hashicorp/consul/api v1.14.0
github.com/hashicorp/cronexpr v1.1.2
github.com/hashicorp/nomad/api v0.0.0-20230404200950-434f7a1745c6
github.com/hashicorp/serf v0.9.7
github.com/mitchellh/mapstructure v1.5.0
github.com/rogpeppe/go-internal v1.12.0
golang.org/x/oauth2 v0.10.0
google.golang.org/api v0.128.0
google.golang.org/genproto v0.0.0-20230711160842-782d3b101e98
google.golang.org/grpc v1.58.3
k8s.io/api v0.24.6
k8s.io/apimachinery v0.24.6
k8s.io/client-go v0.24.6
k8s.io/klog/v2 v2.70.1
k8s.io/kube-openapi v0.0.0-20230327201221-f5883ff37f0c
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
sigs.k8s.io/structured-merge-diff/v4 v4.2.3
github.com/simonpasquier/klog-gokit/v3 v3.0.0

@TheMeier
Copy link

Wouldn't it be better to have one commit per dependency?
Also dependabot is active...

@hienvanhuynh
Copy link
Contributor Author

yeah dependabot is helpful, but it is still lag behind a bit. As I can see there are at least some known CVEs: https://nvd.nist.gov/vuln/detail/CVE-2022-1996, GHSA-m425-mq94-257g. And in my opinion, it should be ok to group these into one commit to save our time

cloud.google.com/go/compute v1.23.0
github.com/armon/go-metrics v0.4.1
github.com/digitalocean/godo v1.82.0
github.com/docker/go-units v0.5.0
github.com/emicklei/go-restful/v3 v3.8.0
github.com/go-openapi/jsonpointer v0.19.6
github.com/go-openapi/jsonreference v0.20.1
github.com/go-openapi/swag v0.22.3
github.com/go-zookeeper/zk v1.0.3
github.com/googleapis/enterprise-certificate-proxy v0.2.5
github.com/googleapis/gax-go/v2 v2.12.0
github.com/gorilla/websocket v1.5.0
github.com/hashicorp/consul/api v1.14.0
github.com/hashicorp/cronexpr v1.1.2
github.com/hashicorp/errwrap v1.0.0
github.com/hashicorp/go-multierror v1.1.1
github.com/hashicorp/nomad/api v0.0.0-20230404200950-434f7a1745c6
github.com/hashicorp/serf v0.9.7
github.com/mitchellh/mapstructure v1.5.0
github.com/rogpeppe/go-internal v1.12.0
golang.org/x/exp v0.0.0-20240213143201-ec583247a57a
google.golang.org/api v0.128.0
google.golang.org/grpc v1.58.3
k8s.io/api v0.24.6
k8s.io/apimachinery v0.24.6
k8s.io/client-go v0.24.6
k8s.io/klog/v2 v2.70.1
k8s.io/kube-openapi v0.0.0-20230327201221-f5883ff37f0c
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
sigs.k8s.io/structured-merge-diff/v4 v4.2.3
github.com/simonpasquier/klog-gokit/v3 v3.0.0
@hienvanhuynh
Copy link
Contributor Author

Hi @jacksontj what do you think, does this look ok?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants