Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/gin-gonic/gin from 1.8.1 to 1.9.1 #1369

Merged
merged 1 commit into from
Feb 5, 2024

Conversation

mszostok
Copy link
Contributor

@mszostok mszostok commented Feb 5, 2024

Description

Changes proposed in this pull request:

Unfortunately, we are not able to access secrets so we are not able to download deps:

go: github.com/kubeshop/botkube-cloud/botkube-cloud-backend@v0.0.0-00010101000000-000000000000 (replaced by github.com/kubeshop/botkube-cloud/botkube-cloud-backend@v0.0.0-20240130141911-b03e563f06dc): version "v0.0.0-20240130141911-b03e563f06dc" invalid: git ls-remote -q origin in /home/runner/go/pkg/mod/cache/vcs/c9382464cee0ea045612c5f4e3c2626e7bda5ba48bce16db4201d7080b9099fb: exit status 128:
	remote: Invalid username or password.

To overcome this issue, I just delete the imports formatting from the e2e tests. The other option would be to use the pull_request_target and then check out the code, but then they will also have access to the token, so malicious code still can download the git repo and steal it. I don't think that losing the import sorting for e2e is a big problem here.

@mszostok mszostok added dependencies Pull requests that update a dependency file other Internal, no user-facing changes. labels Feb 5, 2024
@mszostok mszostok force-pushed the bump-deps branch 2 times, most recently from c57e24f to 06743d2 Compare February 5, 2024 10:48
@mszostok mszostok marked this pull request as ready for review February 5, 2024 11:57
@mszostok mszostok requested review from PrasadG193 and a team as code owners February 5, 2024 11:57
@mszostok mszostok requested a review from pkosiec February 5, 2024 11:57
@pkosiec pkosiec self-assigned this Feb 5, 2024
Copy link
Member

@pkosiec pkosiec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, I also think formatting imports for tests isn't a huge loss 👍

@mszostok mszostok merged commit e5805ac into kubeshop:main Feb 5, 2024
17 checks passed
@mszostok mszostok deleted the bump-deps branch February 5, 2024 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file other Internal, no user-facing changes.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants