update module github.com/coreos/go-oidc to v3.10.0 #2399

Nagarei · 2024-05-01T22:58:59Z

breaking changes はあまり無さそうなので多分動く... 多分
https://github.com/coreos/go-oidc?tab=readme-ov-file#updates-from-v2-to-v3

Nagarei · 2024-05-01T23:10:45Z

蛇足: PRを出した経緯

Docker Desktop に脆弱性あるよと言われる
1. docker pull ghcr.io/traptitech/traq:3.17.0
2. Docker Desktop の Images から traq:3.17.0 をクリックして Image hierarchy を見る
3. Vulnerabilities が表示される
4. gopkg.in/square/go-jose.v2 2.6.0 に脆弱性があるらしい

 $ go mod why gopkg.in/square/go-jose.v2
 # gopkg.in/square/go-jose.v2
 github.com/traPtitech/traQ/router/auth
 github.com/coreos/go-oidc
 gopkg.in/square/go-jose.v2

github.com/coreos/go-oidc を更新する

motoki317

ありがとうございます

update module github.com/coreos/go-oidc to v3.10.0

4457787

motoki317 approved these changes May 8, 2024

View reviewed changes

motoki317 merged commit 33374c8 into traPtitech:master May 8, 2024
6 checks passed

Nagarei deleted the update/coreos-oidc branch May 8, 2024 02:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

update module github.com/coreos/go-oidc to v3.10.0 #2399

update module github.com/coreos/go-oidc to v3.10.0 #2399

Nagarei commented May 1, 2024 •

edited

Nagarei commented May 1, 2024

motoki317 left a comment

update module github.com/coreos/go-oidc to v3.10.0 #2399

update module github.com/coreos/go-oidc to v3.10.0 #2399

Conversation

Nagarei commented May 1, 2024 • edited

Nagarei commented May 1, 2024

motoki317 left a comment

Choose a reason for hiding this comment

Nagarei commented May 1, 2024 •

edited