Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

go_deps: upgrade docker, pgx and jwx #6224

Merged
merged 1 commit into from
Mar 25, 2024
Merged

Conversation

sluongng
Copy link
Contributor

@sluongng sluongng commented Mar 25, 2024

Upgrade several dependencies highlighted by Dependabot.

> go get github.com/docker/docker@latest
go: upgraded github.com/docker/docker v24.0.2+incompatible => v26.0.0+incompatible

> go get github.com/jackc/pgx/v5@latest
go: upgraded github.com/jackc/pgx/v5 v5.4.1 => v5.5.5

> go get github.com/lestrrat-go/jwx@latest
go: upgraded github.com/lestrrat-go/blackmagic v1.0.1 => v1.0.2
go: upgraded github.com/lestrrat-go/jwx v1.2.26 => v1.2.29
go: upgraded github.com/stretchr/testify v1.8.4 => v1.9.0
go: upgraded golang.org/x/crypto v0.18.0 => v0.21.0
go: upgraded golang.org/x/net v0.20.0 => v0.21.0
go: upgraded golang.org/x/sys v0.16.0 => v0.18.0
go: upgraded golang.org/x/term v0.16.0 => v0.18.0

Replace some deprecated structs in docker/types with new structs in
docker/types/container and docker/types/registry.

Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/152
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/150
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/149
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/147
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/146
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/144
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/140
Closes https://github.com/buildbuddy-io/buildbuddy/security/dependabot/138

@sluongng sluongng force-pushed the sluongng/dependabot-up-go-deps branch from 67c5e5c to 2249766 Compare March 25, 2024 16:46
@sluongng sluongng merged commit eea1869 into master Mar 25, 2024
13 of 16 checks passed
@sluongng sluongng deleted the sluongng/dependabot-up-go-deps branch March 25, 2024 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants