Skip to content

dep: update deps that were reported in OSV issues#915

Merged
unclezoro merged 4 commits intobnb-chain:developfrom
j75689:fix/dep_issues
Feb 2, 2023
Merged

dep: update deps that were reported in OSV issues#915
unclezoro merged 4 commits intobnb-chain:developfrom
j75689:fix/dep_issues

Conversation

@j75689
Copy link
Contributor

@j75689 j75689 commented Jan 12, 2023

Description

This pr updates some dependencies to newer versions.

Rationale

Some dependency was found in OSV-reported issues. update them for security.
refer: https://github.com/google/osv-scanner

╭───────────────────────────────────────────────────┬───────────┬─────────────────────────────────────┬─────────────┬────────────────╮ ≈
│ OSV URL (ID IN BOLD)                              │ ECOSYSTEM │ PACKAGE                             │ VERSION     │ SOURCE         │
├───────────────────────────────────────────────────┼───────────┼─────────────────────────────────────┼─────────────┼────────────────┤ ≈
│ https://osv.dev/vulnerability/GHSA-2chg-86hq-7w38 │ Go        │ github.com/btcsuite/btcd            │ 0.20.1-beta │ ../node/go.mod │
│ https://osv.dev/vulnerability/GO-2022-1098        │           │                                     │             │                │
│ https://osv.dev/vulnerability/GO-2022-0322        │ Go        │ github.com/prometheus/client_golang │ 1.1.0       │ ../node/go.mod │
│ https://osv.dev/vulnerability/GO-2022-1144        │ Go        │ golang.org/x/net                    │ 0.3.0       │ ../node/go.mod │
╰───────────────────────────────────────────────────┴───────────┴─────────────────────────────────────┴─────────────┴────────────────╯ ≈

Example

NA

Changes

Notable changes:

  • go.mod

@codecov-commenter
Copy link

codecov-commenter commented Jan 12, 2023

Codecov Report

Base: 49.51% // Head: 49.49% // Decreases project coverage by -0.02% ⚠️

Coverage data is based on head (e8970ba) compared to base (161cf28).
Patch has no changes to coverable lines.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

Additional details and impacted files
@@             Coverage Diff             @@
##           develop     #915      +/-   ##
===========================================
- Coverage    49.51%   49.49%   -0.02%     
===========================================
  Files          126      126              
  Lines        12558    12558              
===========================================
- Hits          6218     6216       -2     
- Misses        5920     5922       +2     
  Partials       420      420              
Impacted Files Coverage Δ
common/log/async_file_writer.go 64.49% <0.00%> (-1.45%) ⬇️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

@j75689 j75689 marked this pull request as ready for review February 2, 2023 02:44
@unclezoro unclezoro added the r4r ready for review label Feb 2, 2023
@unclezoro unclezoro merged commit e50b498 into bnb-chain:develop Feb 2, 2023
forcodedancing pushed a commit to forcodedancing/node that referenced this pull request Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

r4r ready for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants