Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #616

Merged
merged 7 commits into from
Mar 16, 2022
Merged

Update dependencies #616

merged 7 commits into from
Mar 16, 2022

Conversation

hiddeco
Copy link
Member

@hiddeco hiddeco commented Mar 15, 2022

  • github.com/docker/distribution to v2.8.0 to mitigate GMS-2022-20
  • Remove redundant github.com/docker/cli replace, as Helm has updated it upstream
  • Update golang.org/x/crypto to latest, to add support for rsa-ssh2-256/512 (https://twitter.com/filosottile/status/1503702055764078592)
  • Update various other dependencies to their latest versions

This mitigates GMS-2022-20.

Signed-off-by: Hidde Beydals <hello@hidde.co>
This was required by an older version of Helm, which has now updated
the dependency itself.

Signed-off-by: Hidde Beydals <hello@hidde.co>
This pins it to the latest version which introduces support for
rsa-ssh2-256/512.

Signed-off-by: Hidde Beydals <hello@hidde.co>
@hiddeco hiddeco added the area/ci CI related issues and pull requests label Mar 15, 2022
Signed-off-by: Hidde Beydals <hello@hidde.co>
Copy link
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@hiddeco hiddeco marked this pull request as ready for review March 16, 2022 08:57
- github.com/fluxcd/pkg/apis/meta to v0.12.1
- k8s.io/apimachinery to v0.23.4
- sigs.k8s.io/controller-runtime to v0.11.1

Signed-off-by: Hidde Beydals <hello@hidde.co>
- cloud.google.com/go/storage to v1.21.0
- github.com/Azure/azure-sdk-for-go/sdk/azcore to v0.22.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity to v0.13.2
- github.com/elazarl/goproxy to v0.0.0-20220115173737-adb46da277ac
- github.com/fluxcd/pkg/apis/meta to v0.12.1
- github.com/fluxcd/pkg/gittestserver to v0.5.1
- github.com/fluxcd/pkg/helmtestserver to v0.7.1
- github.com/fluxcd/pkg/runtime to v0.13.2
- github.com/fluxcd/pkg/ssh to v0.3.2
- github.com/libgit2/git2go/v33 to v33.0.9
- github.com/minio/minio-go/v7 to v7.0.23
- github.com/onsi/gomega to v1.18.1
- google.golang.org/api to v0.73.0
- sigs.k8s.io/cli-utils to v0.29.3

Signed-off-by: Hidde Beydals <hello@hidde.co>
This is required after the update of `cloud.google.com/go/storage` from
`v1.16.0` to `v1.21.0`, due to changed `STORAGE_EMULATOR_HOST`
behavior.

Signed-off-by: Hidde Beydals <hello@hidde.co>
@hiddeco hiddeco merged commit 9bbcd09 into main Mar 16, 2022
@hiddeco hiddeco deleted the dep-updates branch March 16, 2022 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci CI related issues and pull requests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants