Skip to content

v5.8.16

@probelabs probelabs tagged this 25 Sep 09:41
[TT-18305] bump dependencies (#8723)

### **User description**
This PR bumps dependencies to newer versions to cover CVEs.


___

### **PR Type**
Bug fix, Enhancement


___

### **Description**
- Bump core Go networking dependencies

- Upgrade gRPC and OAuth libraries

- Refresh OpenTelemetry dependency set

- Update indirect transitive dependencies


___

### Diagram Walkthrough


```mermaid
flowchart LR
  mod["go.mod dependency updates"]
  core["Core Go modules"]
  grpc["gRPC and Google APIs"]
  otel["OpenTelemetry packages"]
  indirect["Indirect transitive libraries"]
  mod -- "bumps" --> core
  mod -- "upgrades" --> grpc
  mod -- "refreshes" --> otel
  mod -- "updates" --> indirect
```



<details> <summary><h3> File Walkthrough</h3></summary>

<table><thead><tr><th></th><th align="left">Relevant

files</th></tr></thead><tbody><tr><td><strong>Dependencies</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>go.mod</strong><dd><code>Refresh Go module dependencies
and transitive versions</code>&nbsp; &nbsp; &nbsp; </dd></summary>
<hr>

go.mod

<ul><li>Upgrades direct dependencies including
<code>golang.org/x/crypto</code>, <br><code>golang.org/x/net</code>,
<code>golang.org/x/sync</code>, and <code>golang.org/x/oauth2</code><br>
<li> Bumps <code>google.golang.org/grpc</code> and related Google API
proto modules<br> <li> Updates OpenTelemetry packages including
<code>otel</code>, <code>trace</code>, <code>metric</code>,
<code>sdk</code>, and <br><code>otelhttp</code><br> <li> Refreshes
indirect dependencies such as <code>golang.org/x/sys</code>,
<br><code>golang.org/x/text</code>, <code>golang.org/x/tools</code>, and
<br><code>github.com/klauspost/compress</code></ul>


</details>


  </td>
<td><a

href="https://github.com/TykTechnologies/tyk/pull/8723/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6">+17/-17</a>&nbsp;
</td>

</tr>
</table></td></tr></tr></tbody></table>

</details>

___

[TT-18305]:
https://tyktech.atlassian.net/browse/TT-18305?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ

Co-authored-by: Patric Vormstein <pvormstein@googlemail.com>
Assets 2
Loading