Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: update kubo to v0.19 #57

Merged
merged 5 commits into from
Apr 20, 2023
Merged

feat: update kubo to v0.19 #57

merged 5 commits into from
Apr 20, 2023

Conversation

gfanton
Copy link
Member

@gfanton gfanton commented Apr 14, 2023

@gfanton gfanton requested a review from a team as a code owner April 14, 2023 13:17
@gfanton gfanton self-assigned this Apr 14, 2023
@guardrails
Copy link

guardrails bot commented Apr 14, 2023

⚠️ We detected 8 security issues in this pull request:

Vulnerable Libraries (8)
Severity Details
Medium pkg:golang/golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586@v0.0.0-20190820162420-60c769a6c586 - no patch available
N/A pkg:golang/golang.org/x/sys@v0.0.0-20200814200057-3d37ad5750ed@v0.0.0-20200814200057-3d37ad5750ed upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A pkg:golang/golang.org/x/sys@v0.0.0-20210927094055-39ccf1dd6fa6@v0.0.0-20210927094055-39ccf1dd6fa6 upgrade to: 1.17.10,1.18.2,0.0.0-20220412211240-33da011f77ad
N/A pkg:golang/github.com/go-yaml/yaml@v2.1.0+incompatible@v2.1.0+incompatible upgrade to: 2.2.3
Medium pkg:golang/github.com/pkg/sftp@v1.10.1@v1.10.1 - no patch available
High pkg:golang/github.com/gin-gonic/gin@v1.6.3@v1.6.3 upgrade to: 1.7.0
High pkg:golang/github.com/gin-gonic/gin@v1.6.3 @v1.6.3 upgrade to: 1.7.7
High pkg:golang/golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc@v0.0.0-20200813134508-3edf25e44fcc - no patch available

More info on how to fix Vulnerable Libraries in Go.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@jefft0
Copy link
Contributor

jefft0 commented Apr 17, 2023

@gfanton, have you look at why the stable tests fail?

@jefft0 jefft0 removed the request for review from a team April 19, 2023 08:35
@gfanton gfanton force-pushed the feat/update-kubo branch 3 times, most recently from 291dab1 to d76a738 Compare April 20, 2023 07:44
@gfanton gfanton changed the title feat: update kubo to v0.19 WIP: update kubo to v0.19 Apr 20, 2023
Copy link
Collaborator

@D4ryl00 D4ryl00 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: gfanton <8671905+gfanton@users.noreply.github.com>
Signed-off-by: gfanton <8671905+gfanton@users.noreply.github.com>
Signed-off-by: gfanton <8671905+gfanton@users.noreply.github.com>
Signed-off-by: gfanton <8671905+gfanton@users.noreply.github.com>
Signed-off-by: gfanton <8671905+gfanton@users.noreply.github.com>
@gfanton gfanton changed the title WIP: update kubo to v0.19 feat: update kubo to v0.19 Apr 20, 2023
@gfanton gfanton merged commit 4ad62f5 into berty:main Apr 20, 2023
@gfanton gfanton deleted the feat/update-kubo branch April 20, 2023 18:06
@github-actions
Copy link

🎉 This PR is included in version 1.7.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants