Skip to content

Commit 85420d5

Browse files
authored
[1.15] go.mod: CVE updates (#3714)
Signed-off-by: joshvanl <[email protected]>
1 parent f449eca commit 85420d5

File tree

8 files changed

+189
-189
lines changed

8 files changed

+189
-189
lines changed

.build-tools/go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ require (
1717
github.com/iancoleman/orderedmap v0.0.0-20190318233801-ac98e3ecb4b0 // indirect
1818
github.com/inconshreveable/mousetrap v1.0.1 // indirect
1919
github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4 // indirect
20-
github.com/spf13/cast v1.5.1 // indirect
20+
github.com/spf13/cast v1.6.0 // indirect
2121
github.com/spf13/pflag v1.0.5 // indirect
2222
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
2323
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect

.build-tools/go.sum

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@ github.com/dapr/kit v0.13.1-0.20240909215017-3823663aa4bb/go.mod h1:Hz1W2LmWfA4U
44
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
55
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
66
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
7-
github.com/frankban/quicktest v1.14.4 h1:g2rn0vABPOOXmZUj+vbmUp0lPoXEMuhTpIluN0XL9UY=
8-
github.com/frankban/quicktest v1.14.4/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
7+
github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
8+
github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
99
github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
1010
github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
1111
github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
@@ -35,8 +35,8 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH
3535
github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
3636
github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
3737
github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
38-
github.com/spf13/cast v1.5.1 h1:R+kOtfhWQE6TVQzY+4D7wJLBgkdVasCEFxSUBYBYIlA=
39-
github.com/spf13/cast v1.5.1/go.mod h1:b9PdjNptOpzXr7Rq1q9gJML/2cdGQAo69NKzQ10KN48=
38+
github.com/spf13/cast v1.6.0 h1:GEiTHELF+vaR5dhz3VqZfFSzZjYbgeKDpBxQVS4GYJ0=
39+
github.com/spf13/cast v1.6.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
4040
github.com/spf13/cobra v1.6.1 h1:o94oiPyS4KD1mPy2fmcYYHHfCxLqYjJOhGsCHFZtEzA=
4141
github.com/spf13/cobra v1.6.1/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
4242
github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=

go.mod

Lines changed: 36 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ require (
5050
github.com/aws/rolesanywhere-credential-helper v1.0.4
5151
github.com/bradfitz/gomemcache v0.0.0-20230905024940-24af94b03874
5252
github.com/camunda/zeebe/clients/go/v8 v8.2.12
53-
github.com/cenkalti/backoff/v4 v4.2.1
53+
github.com/cenkalti/backoff/v4 v4.3.0
5454
github.com/chebyrash/promise v0.0.0-20230709133807-42ec49ba1459
5555
github.com/cinience/go_rocketmq v0.0.2
5656
github.com/cloudevents/sdk-go/binding/format/protobuf/v2 v2.14.0
@@ -95,9 +95,9 @@ require (
9595
github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4
9696
github.com/mrz1836/postmark v1.6.1
9797
github.com/nats-io/nats-server/v2 v2.9.23
98-
github.com/nats-io/nats.go v1.28.0
98+
github.com/nats-io/nats.go v1.31.0
9999
github.com/nats-io/nkeys v0.4.6
100-
github.com/open-policy-agent/opa v0.55.0
100+
github.com/open-policy-agent/opa v0.68.0
101101
github.com/oracle/oci-go-sdk/v54 v54.0.0
102102
github.com/pashagolub/pgxmock/v2 v2.12.0
103103
github.com/patrickmn/go-cache v2.1.0+incompatible
@@ -108,7 +108,7 @@ require (
108108
github.com/riferrei/srclient v0.6.0
109109
github.com/sendgrid/sendgrid-go v3.13.0+incompatible
110110
github.com/sijms/go-ora/v2 v2.7.18
111-
github.com/spf13/cast v1.5.1
111+
github.com/spf13/cast v1.6.0
112112
github.com/spiffe/go-spiffe/v2 v2.1.7
113113
github.com/stealthrocket/wasi-go v0.8.1-0.20230912180546-8efbab50fb58
114114
github.com/stretchr/testify v1.10.0
@@ -117,22 +117,22 @@ require (
117117
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssm v1.0.732
118118
github.com/tetratelabs/wazero v1.7.0
119119
github.com/tmc/langchaingo v0.1.12
120-
github.com/valyala/fasthttp v1.49.0
120+
github.com/valyala/fasthttp v1.53.0
121121
github.com/vmware/vmware-go-kcl v1.5.1
122122
github.com/xdg-go/scram v1.1.2
123-
go.etcd.io/etcd/client/v3 v3.5.9
123+
go.etcd.io/etcd/client/v3 v3.5.10
124124
go.mongodb.org/mongo-driver v1.14.0
125-
go.uber.org/goleak v1.2.1
125+
go.uber.org/goleak v1.3.0
126126
go.uber.org/multierr v1.11.0
127127
go.uber.org/ratelimit v0.3.0
128-
golang.org/x/crypto v0.26.0
128+
golang.org/x/crypto v0.35.0
129129
golang.org/x/exp v0.0.0-20240119083558-1b970713d09a
130130
golang.org/x/mod v0.17.0
131-
golang.org/x/net v0.28.0
132-
golang.org/x/oauth2 v0.20.0
131+
golang.org/x/net v0.36.0
132+
golang.org/x/oauth2 v0.21.0
133133
google.golang.org/api v0.180.0
134-
google.golang.org/grpc v1.64.0
135-
google.golang.org/protobuf v1.34.1
134+
google.golang.org/grpc v1.66.0
135+
google.golang.org/protobuf v1.34.2
136136
gopkg.in/couchbase/gocb.v1 v1.6.7
137137
gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
138138
gopkg.in/yaml.v3 v3.0.1
@@ -161,6 +161,7 @@ require (
161161
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2 // indirect
162162
github.com/Code-Hex/go-generics-cache v1.3.1 // indirect
163163
github.com/DataDog/zstd v1.5.2 // indirect
164+
github.com/Microsoft/go-winio v0.6.2 // indirect
164165
github.com/OneOfOne/xxhash v1.2.8 // indirect
165166
github.com/RoaringBitmap/roaring v1.1.0 // indirect
166167
github.com/Workiva/go-datastructures v1.0.53 // indirect
@@ -175,7 +176,7 @@ require (
175176
github.com/alicebob/gopher-json v0.0.0-20200520072559-a9ecdc9d1d3a // indirect
176177
github.com/aliyun/credentials-go v1.1.2 // indirect
177178
github.com/aliyunmq/mq-http-go-sdk v1.0.3 // indirect
178-
github.com/andybalholm/brotli v1.0.5 // indirect
179+
github.com/andybalholm/brotli v1.1.0 // indirect
179180
github.com/apache/dubbo-getty v1.4.9-0.20220610060150-8af010f3f3dc // indirect
180181
github.com/apache/rocketmq-client-go v1.2.5 // indirect
181182
github.com/ardielle/ardielle-go v1.5.2 // indirect
@@ -198,7 +199,7 @@ require (
198199
github.com/bufbuild/protocompile v0.4.0 // indirect
199200
github.com/bytedance/gopkg v0.0.0-20240711085056-a03554c296f8 // indirect
200201
github.com/cenkalti/backoff v2.2.1+incompatible // indirect
201-
github.com/cespare/xxhash/v2 v2.2.0 // indirect
202+
github.com/cespare/xxhash/v2 v2.3.0 // indirect
202203
github.com/choleraehyq/pid v0.0.19 // indirect
203204
github.com/clbanning/mxj/v2 v2.5.6 // indirect
204205
github.com/cloudwego/fastpb v0.0.4-0.20230131074846-6fc453d58b96 // indirect
@@ -230,12 +231,12 @@ require (
230231
github.com/fsnotify/fsnotify v1.7.0 // indirect
231232
github.com/gage-technologies/mistral-go v1.0.0 // indirect
232233
github.com/gavv/httpexpect v2.0.0+incompatible // indirect
233-
github.com/ghodss/yaml v1.0.1-0.20190212211648-25d852aebe32 // indirect
234234
github.com/go-ini/ini v1.67.0 // indirect
235+
github.com/go-jose/go-jose/v3 v3.0.3 // indirect
235236
github.com/go-kit/kit v0.10.0 // indirect
236237
github.com/go-kit/log v0.2.1 // indirect
237238
github.com/go-logfmt/logfmt v0.5.1 // indirect
238-
github.com/go-logr/logr v1.4.1 // indirect
239+
github.com/go-logr/logr v1.4.2 // indirect
239240
github.com/go-logr/stdr v1.2.2 // indirect
240241
github.com/go-ole/go-ole v1.2.6 // indirect
241242
github.com/go-openapi/jsonpointer v0.19.6 // indirect
@@ -317,8 +318,7 @@ require (
317318
github.com/matryer/is v1.4.0 // indirect
318319
github.com/mattn/go-colorable v0.1.13 // indirect
319320
github.com/mattn/go-isatty v0.0.20 // indirect
320-
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
321-
github.com/miekg/dns v1.1.43 // indirect
321+
github.com/miekg/dns v1.1.57 // indirect
322322
github.com/minio/highwayhash v1.0.2 // indirect
323323
github.com/mitchellh/copystructure v1.2.0 // indirect
324324
github.com/mitchellh/go-homedir v1.1.0 // indirect
@@ -343,10 +343,10 @@ require (
343343
github.com/pkoukk/tiktoken-go v0.1.6 // indirect
344344
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
345345
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
346-
github.com/prometheus/client_golang v1.16.0 // indirect
347-
github.com/prometheus/client_model v0.3.0 // indirect
348-
github.com/prometheus/common v0.42.0 // indirect
349-
github.com/prometheus/procfs v0.11.0 // indirect
346+
github.com/prometheus/client_golang v1.20.2 // indirect
347+
github.com/prometheus/client_model v0.6.1 // indirect
348+
github.com/prometheus/common v0.55.0 // indirect
349+
github.com/prometheus/procfs v0.15.1 // indirect
350350
github.com/prometheus/statsd_exporter v0.22.7 // indirect
351351
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
352352
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
@@ -355,7 +355,6 @@ require (
355355
github.com/santhosh-tekuri/jsonschema/v5 v5.0.0 // indirect
356356
github.com/segmentio/asm v1.2.0 // indirect
357357
github.com/sendgrid/rest v2.6.9+incompatible // indirect
358-
github.com/sergi/go-diff v1.2.0 // indirect
359358
github.com/shirou/gopsutil/v3 v3.23.12 // indirect
360359
github.com/shoenig/go-m1cpu v0.1.6 // indirect
361360
github.com/sirupsen/logrus v1.9.3 // indirect
@@ -384,29 +383,27 @@ require (
384383
github.com/yuin/gopher-lua v1.1.0 // indirect
385384
github.com/yusufpapurcu/wmi v1.2.3 // indirect
386385
github.com/zeebo/errs v1.3.0 // indirect
387-
go.etcd.io/etcd/api/v3 v3.5.9 // indirect
388-
go.etcd.io/etcd/client/pkg/v3 v3.5.9 // indirect
386+
go.etcd.io/etcd/api/v3 v3.5.10 // indirect
387+
go.etcd.io/etcd/client/pkg/v3 v3.5.10 // indirect
389388
go.opencensus.io v0.24.0 // indirect
390389
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0 // indirect
391-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0 // indirect
392-
go.opentelemetry.io/otel v1.26.0 // indirect
393-
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 // indirect
394-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 // indirect
395-
go.opentelemetry.io/otel/metric v1.26.0 // indirect
396-
go.opentelemetry.io/otel/sdk v1.26.0 // indirect
397-
go.opentelemetry.io/otel/trace v1.26.0 // indirect
390+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
391+
go.opentelemetry.io/otel v1.28.0 // indirect
392+
go.opentelemetry.io/otel/metric v1.28.0 // indirect
393+
go.opentelemetry.io/otel/sdk v1.28.0 // indirect
394+
go.opentelemetry.io/otel/trace v1.28.0 // indirect
398395
go.uber.org/atomic v1.10.0 // indirect
399396
go.uber.org/zap v1.24.0 // indirect
400397
golang.org/x/arch v0.10.0 // indirect
401-
golang.org/x/sync v0.8.0 // indirect
402-
golang.org/x/sys v0.23.0 // indirect
403-
golang.org/x/term v0.23.0 // indirect
404-
golang.org/x/text v0.17.0 // indirect
405-
golang.org/x/time v0.5.0 // indirect
398+
golang.org/x/sync v0.11.0 // indirect
399+
golang.org/x/sys v0.30.0 // indirect
400+
golang.org/x/term v0.29.0 // indirect
401+
golang.org/x/text v0.22.0 // indirect
402+
golang.org/x/time v0.6.0 // indirect
406403
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
407404
google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda // indirect
408-
google.golang.org/genproto/googleapis/api v0.0.0-20240513163218-0867130af1f8 // indirect
409-
google.golang.org/genproto/googleapis/rpc v0.0.0-20240509183442-62759503f434 // indirect
405+
google.golang.org/genproto/googleapis/api v0.0.0-20240701130421-f6361c86f094 // indirect
406+
google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 // indirect
410407
google.golang.org/grpc/examples v0.0.0-20230224211313-3775f633ce20 // indirect
411408
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
412409
gopkg.in/couchbase/gocbcore.v7 v7.1.18 // indirect

0 commit comments

Comments
 (0)