sinjuginas/oauth2-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3862182039
oauth2-proxy/go.mod

89 lines
3.7 KiB
Modula-2
Raw Normal View History

Fix import path for v7 (#800) * fix import path for v7 find ./ -name "*.go" | xargs sed -i -e 's|"github.com/oauth2-proxy/oauth2-proxy|"github.com/oauth2-proxy/oauth2-proxy/v7|' * fix module path * go mod tidy * fix installation docs * update CHANGELOG * Update CHANGELOG.md Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2020-09-29 19:44:42 +03:00
module github.com/oauth2-proxy/oauth2-proxy/v7
Switch from dep to go mod Update modules to avoid issues with golangci-lint
2019-07-13 23:24:40 +03:00
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
go 1.19
Switch from dep to go mod Update modules to avoid issues with golangci-lint
2019-07-13 23:24:40 +03:00
require (
Parse Redis cluster and sentinel urls (#573) * Parse Redis cluster and sentinel urls * Add changelog entry for #573 * Add unit tests for redis session store * Use %v for error fmt Co-authored-by: Amnay Mokhtari <amnay.mokhtari@adevinta.com> Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2020-05-27 20:40:50 +03:00
github.com/Bose/minisentinel v0.0.0-20200130220412-917c5a9223bb
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
github.com/alicebob/miniredis/v2 v2.23.0
github.com/benbjohnson/clock v1.3.0
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/bitly/go-simplejson v0.5.1
github.com/bsm/redislock v0.9.3
github.com/coreos/go-oidc/v3 v3.6.0
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
github.com/fsnotify/fsnotify v1.6.0
Introduce alpha configuration loading
2020-11-09 23:17:43 +03:00
github.com/ghodss/yaml v1.0.1-0.20190212211648-25d852aebe32
Discover signature algorithms from OIDC provider (#1662)
2022-05-29 15:48:09 +03:00
github.com/golang-jwt/jwt v3.2.2+incompatible
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
github.com/google/uuid v1.3.0
Replace standard serve mux with gorilla mux
2021-02-22 18:55:08 +03:00
github.com/gorilla/mux v1.8.0
Add HealthCheck middleware
2020-06-14 18:42:05 +03:00
github.com/justinas/alice v1.2.0
Support Go 1.13.x and allow to override REGISTRY (#273) Signed-off-by: Dhi Aurrahman <dio@tetrate.io>
2019-10-07 23:53:46 +03:00
github.com/mbland/hmacauth v0.0.0-20170912233209-44256dfd4bfa
Do not update viper This breaks our deafult structures tests
2022-10-25 22:28:49 +03:00
github.com/mitchellh/mapstructure v1.1.2
Discover signature algorithms from OIDC provider (#1662)
2022-05-29 15:48:09 +03:00
github.com/oauth2-proxy/mockoidc v0.0.0-20220221072942-e3afe97dec43
Generate reference page in configuration
2020-11-07 19:30:00 +03:00
github.com/oauth2-proxy/tools/reference-gen v0.0.0-20210118095127-56ffd7384404
Bugfix/check json path (#1921) * Validate jsonpath in claim extractor Signed-off-by: Joseph Weigl <joseph.weigl@audi.de> * Add test and changelog for claim extractor json path --------- Signed-off-by: Joseph Weigl <joseph.weigl@audi.de> Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2023-08-24 15:40:43 +03:00
github.com/ohler55/ojg v1.14.5
Update go-redis/redis to v9. (#1847) * Update go-redis/redis to v9. - And updated redislock, testify, ginko and gomega have also been updated. - Renamed the option `IdleTimeout` to `ConnMaxIdleTime` because of https://github.com/go-redis/redis/blob/517938a6b083b8d4ffbc9d46c0bd9df19f10ffaf/CHANGELOG.md * Update CHANGELOG.md * Dropping dot import of the types since they created aliases now * fixing some error messages to make tests happy * updating more error messages that were changed to make tests happy * reverting error messages Co-authored-by: Muhammad Arham <marham@i2cinc.com>
2022-10-24 18:41:06 +03:00
github.com/onsi/ginkgo v1.16.5
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/onsi/gomega v1.27.8
Update session state handling
2022-10-25 20:48:03 +03:00
github.com/pierrec/lz4/v4 v4.1.17
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/prometheus/client_golang v1.15.1
github.com/redis/go-redis/v9 v9.0.5
github.com/spf13/cast v1.5.1
Aggregate error logging on JWT chain failures
2020-10-24 09:43:27 +03:00
github.com/spf13/pflag v1.0.5
Do not update viper This breaks our deafult structures tests
2022-10-25 22:28:49 +03:00
github.com/spf13/viper v1.6.3
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/stretchr/testify v1.8.3
Update session state handling
2022-10-25 20:48:03 +03:00
github.com/vmihailenco/msgpack/v5 v5.3.5
Upgrade golang.org/x/net to v0.17.0 (#2274) * golang.org/x/net upgrade to v0.17.0 https://artifacthub.io/packages/helm/oauth2-proxy/oauth2-proxy?modal=security-report * Update CHANGELOG.md * go mod tidy
2023-10-24 14:33:03 +03:00
golang.org/x/crypto v0.14.0
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1
Upgrade golang.org/x/net to v0.17.0 (#2274) * golang.org/x/net upgrade to v0.17.0 https://artifacthub.io/packages/helm/oauth2-proxy/oauth2-proxy?modal=security-report * Update CHANGELOG.md * go mod tidy
2023-10-24 14:33:03 +03:00
golang.org/x/net v0.17.0
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
golang.org/x/oauth2 v0.8.0
golang.org/x/sync v0.2.0
google.golang.org/api v0.125.0
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
gopkg.in/natefinch/lumberjack.v2 v2.2.1
Discover signature algorithms from OIDC provider (#1662)
2022-05-29 15:48:09 +03:00
gopkg.in/square/go-jose.v2 v2.6.0
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
k8s.io/apimachinery v0.27.2
Switch from dep to go mod Update modules to avoid issues with golangci-lint
2019-07-13 23:24:40 +03:00
)
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
require (
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
cloud.google.com/go/compute v1.20.0 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
cloud.google.com/go/compute/metadata v0.2.3 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
github.com/alicebob/gopher-json v0.0.0-20200520072559-a9ecdc9d1d3a // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869 // indirect
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is wri… (#2013) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Fixes CVE-2022-41721 (#1994) See: https://avd.aquasec.com/nvd/2022/cve-2022-41717/ * update checkout actions (#1981) * Fix a typo in oauthproxy.go (#2021) * fix typo (#2001) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com> Co-authored-by: Jeroen Landheer <jlandheer@bintelligence.nl> Co-authored-by: Ryuichi Watanabe <ryucrosskey@gmail.com> Co-authored-by: Ho Kim <ho.kim@ulagbulag.io> Co-authored-by: Terrell Russell <terrellrussell@gmail.com>
2023-03-05 20:12:55 +03:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is wri… (#2013) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Fixes CVE-2022-41721 (#1994) See: https://avd.aquasec.com/nvd/2022/cve-2022-41717/ * update checkout actions (#1981) * Fix a typo in oauthproxy.go (#2021) * fix typo (#2001) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com> Co-authored-by: Jeroen Landheer <jlandheer@bintelligence.nl> Co-authored-by: Ryuichi Watanabe <ryucrosskey@gmail.com> Co-authored-by: Ho Kim <ho.kim@ulagbulag.io> Co-authored-by: Terrell Russell <terrellrussell@gmail.com>
2023-03-05 20:12:55 +03:00
github.com/go-jose/go-jose/v3 v3.0.0 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/go-logr/logr v1.2.4 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
Session-Cookie Support (#1713) * Create session cookie when cookie-expire set 0 * Fix format * add test * fix lint error * fix test code * fix conflicted test case * update test case of cookie expiration * update tests of csrf cookies * update docs * Update docs/docs/configuration/overview.md Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> --------- Co-authored-by: tanuki884 <morkazuk@fsi.co.jp> Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2023-08-16 14:23:02 +03:00
github.com/golang/protobuf v1.5.3 // indirect
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
github.com/google/go-cmp v0.5.9 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/google/s2a-go v0.1.4 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/googleapis/gax-go/v2 v2.10.0 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
github.com/hashicorp/hcl v1.0.0 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
github.com/magiconair/properties v1.8.7 // indirect
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
Update go-redis/redis to v9. (#1847) * Update go-redis/redis to v9. - And updated redislock, testify, ginko and gomega have also been updated. - Renamed the option `IdleTimeout` to `ConnMaxIdleTime` because of https://github.com/go-redis/redis/blob/517938a6b083b8d4ffbc9d46c0bd9df19f10ffaf/CHANGELOG.md * Update CHANGELOG.md * Dropping dot import of the types since they created aliases now * fixing some error messages to make tests happy * updating more error messages that were changed to make tests happy * reverting error messages Co-authored-by: Muhammad Arham <marham@i2cinc.com>
2022-10-24 18:41:06 +03:00
github.com/nxadm/tail v1.4.8 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/pelletier/go-toml v1.9.5 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
github.com/pmezard/go-difflib v1.0.0 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
github.com/prometheus/client_model v0.4.0 // indirect
github.com/prometheus/common v0.44.0 // indirect
github.com/prometheus/procfs v0.10.1 // indirect
github.com/spf13/afero v1.9.5 // indirect
github.com/spf13/jwalterweatherman v1.1.0 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
github.com/subosito/gotenv v1.4.2 // indirect
Update session state handling
2022-10-25 20:48:03 +03:00
github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
github.com/yuin/gopher-lua v0.0.0-20210529063254-f4c35e4016d9 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
go.opencensus.io v0.24.0 // indirect
Upgrade golang.org/x/net to v0.17.0 (#2274) * golang.org/x/net upgrade to v0.17.0 https://artifacthub.io/packages/helm/oauth2-proxy/oauth2-proxy?modal=security-report * Update CHANGELOG.md * go mod tidy
2023-10-24 14:33:03 +03:00
golang.org/x/sys v0.13.0 // indirect
golang.org/x/text v0.13.0 // indirect
Update dependencies Ran `go get -u` to update depdendencies automatically to newer versions. I'm aware of a few CVEs that this should resolve
2022-10-22 17:03:37 +03:00
google.golang.org/appengine v1.6.7 // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect
google.golang.org/grpc v1.55.0 // indirect
google.golang.org/protobuf v1.30.0 // indirect
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS (#2047) * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS * Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
2023-04-07 14:33:42 +03:00
gopkg.in/ini.v1 v1.67.0 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
Update go-redis/redis to v9. (#1847) * Update go-redis/redis to v9. - And updated redislock, testify, ginko and gomega have also been updated. - Renamed the option `IdleTimeout` to `ConnMaxIdleTime` because of https://github.com/go-redis/redis/blob/517938a6b083b8d4ffbc9d46c0bd9df19f10ffaf/CHANGELOG.md * Update CHANGELOG.md * Dropping dot import of the types since they created aliases now * fixing some error messages to make tests happy * updating more error messages that were changed to make tests happy * reverting error messages Co-authored-by: Muhammad Arham <marham@i2cinc.com>
2022-10-24 18:41:06 +03:00
gopkg.in/yaml.v2 v2.4.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
k8s.io/gengo v0.0.0-20201113003025-83324d819ded // indirect
Update dependencies (#2128) * Update dependencies * Update changelog
2023-10-02 12:26:58 +03:00
k8s.io/klog/v2 v2.90.1 // indirect
Update go version to 1.17 This includes the change to the pruned module graph with the converted go.mod for Go 1.17 https://go.dev/doc/go1.17#go-command
2021-12-17 18:37:43 +03:00
)
Reference in New Issue Copy Permalink