-
Notifications
You must be signed in to change notification settings - Fork 172
Widespread dependencies update #226
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
52 commits
Select commit
Hold shift + click to select a range
e53e5b3
Bump gopkg.in/yaml.v3 from 3.0.0-20200313102051-9f266ea9e77c to 3.0.1
eldang 6a11a13
go tidy autoclean
eldang fec0bab
Fixed tests
eldang 1302fd1
golang.org/x/image v0.0.0 -> v0.14.0
eldang 2183221
golang/x/net 0.0.0 -> 0.18.0 ; golang/x/crypto 0.0.0 -> 0.15.0
eldang cd91cd3
gogo/protobuf v1.2.1 -> v1.3.2
eldang cbc80dc
dgrijalva/jwt-go v3.2.0+incompatible => v3.2.1-0.20180308231308-06ea1…
eldang 96ec1f5
viper 1.7.1 => 1.17.0
eldang 927d1c2
client_golang v1.11.1 => v1.17.0
eldang aa97b91
gorilla/handlers 1.5.1 => 1.5.2
eldang e996985
gorilla/mux 1.8.0 => 1.8.1
eldang 9262d08
pgconn 1.7.2 => 1.14.1
eldang a65c41b
pgtype 1.6.1 => 1.14.0
eldang 9d347f6
pgx 4.12.1 => 4.18.1
eldang 3acca20
logrus 1.7.0 => 1.9.3
eldang c93ad26
Updated minimum Go version
eldang 93bb19f
Update Go version to 1.18
eldang c09f4ea
Updated Go version to 1.18
eldang bf7a9c0
exp v0.0.0-20230905200255-921286631fa9 => v0.0.0-20231110203233-9a3e…
eldang 4d04235
no-op change to trigger a CI run
eldang 937d623
Revert "no-op change to trigger a CI run"
eldang ec23e15
Trying Go 1.21
eldang b99cfc5
Updated go version in Dockerfile to what I've been testing with locally
eldang 35c8812
Merge branch 'master' into dependency-updates
eldang 4628dce
Expose error to user (this would have saved me soem time)
nein09 be14b84
Clean up BasePath setting in preparation for more tests
nein09 c6f8dd9
Test show/hide preview functionality
nein09 47707c5
Simple health check endpoint and tests
nein09 77b9bdb
Make response make more sense when viewed in a browser
nein09 0877037
Update readme and add a test to make sure i am not lying
nein09 e8e0341
Merge pull request #3 from eldang/health-endpoint
eldang 1603e06
Merge pull request #4 from CrunchyData/master
eldang 6d07d2f
Merge branch 'master' into dependency-updates
eldang c3fd86a
Routine dependency updates
eldang ae8dda0
revert antlr version
eldang 2b63737
Merge pull request #5 from eldang/dependency-updates
eldang a4ed648
Merge branch 'master' into sync-from-upstream
eldang ef31861
added missing go.sum entry
eldang 179783a
Merge pull request #7 from eldang/sync-from-upstream
eldang 618c129
routine dependency updates
eldang febadaf
go mod tidy
eldang 93a6145
Revert "go mod tidy"
eldang 7e92152
Revert "routine dependency updates"
eldang 1681c8b
Merge branch 'master' into dependency-updates
eldang 1e42502
routine dependency updates
eldang 4c5ab21
add missing source
eldang e53bfd8
go mod tidy
eldang 3cbb0f6
Explicitly clean all old `golang.org/x/crypto` versions out
eldang 3dfaac5
Use newer Alpine image
eldang 3c86ebb
Merge pull request #8 from eldang/dependency-updates
eldang 5de3019
Update that I forgot
eldang be48f6b
Merge pull request #9 from eldang/dependency-updates
eldang File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,65 +1,70 @@ | ||
| module github.com/CrunchyData/pg_tileserv | ||
|
|
||
| go 1.21 | ||
| go 1.22.0 | ||
|
|
||
| toolchain go1.23.4 | ||
|
|
||
| require ( | ||
| github.com/Masterminds/sprig/v3 v3.1.0 | ||
| github.com/Masterminds/sprig/v3 v3.3.0 | ||
| github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20220209173558-ad29539cd2e9 | ||
| github.com/gorilla/handlers v1.5.2 | ||
| github.com/gorilla/mux v1.8.1 | ||
| github.com/jackc/pgconn v1.14.3 | ||
| github.com/jackc/pgtype v1.14.0 | ||
| github.com/jackc/pgx/v4 v4.18.2 | ||
| github.com/jackc/pgtype v1.14.4 | ||
| github.com/jackc/pgx/v4 v4.18.3 | ||
| github.com/pborman/getopt/v2 v2.1.0 | ||
| github.com/prometheus/client_golang v1.17.0 | ||
| github.com/prometheus/client_golang v1.20.5 | ||
| github.com/sirupsen/logrus v1.9.3 | ||
| github.com/spf13/viper v1.17.0 | ||
| github.com/stretchr/testify v1.8.4 | ||
| github.com/spf13/viper v1.19.0 | ||
| github.com/stretchr/testify v1.10.0 | ||
| github.com/theckman/httpforwarded v0.4.0 | ||
| ) | ||
|
|
||
| require ( | ||
| dario.cat/mergo v1.0.1 // indirect | ||
| github.com/Masterminds/goutils v1.1.1 // indirect | ||
| github.com/Masterminds/semver/v3 v3.1.1 // indirect | ||
| github.com/Masterminds/semver/v3 v3.3.1 // indirect | ||
| github.com/beorn7/perks v1.0.1 // indirect | ||
| github.com/cespare/xxhash/v2 v2.2.0 // indirect | ||
| github.com/cespare/xxhash/v2 v2.3.0 // indirect | ||
| github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect | ||
| github.com/felixge/httpsnoop v1.0.3 // indirect | ||
| github.com/fsnotify/fsnotify v1.6.0 // indirect | ||
| github.com/google/uuid v1.1.2 // indirect | ||
| github.com/felixge/httpsnoop v1.0.4 // indirect | ||
| github.com/fsnotify/fsnotify v1.8.0 // indirect | ||
| github.com/google/uuid v1.6.0 // indirect | ||
| github.com/hashicorp/hcl v1.0.0 // indirect | ||
| github.com/huandu/xstrings v1.3.1 // indirect | ||
| github.com/imdario/mergo v0.3.8 // indirect | ||
| github.com/huandu/xstrings v1.5.0 // indirect | ||
| github.com/jackc/chunkreader/v2 v2.0.1 // indirect | ||
| github.com/jackc/pgio v1.0.0 // indirect | ||
| github.com/jackc/pgpassfile v1.0.0 // indirect | ||
| github.com/jackc/pgproto3/v2 v2.3.3 // indirect | ||
| github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect | ||
| github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect | ||
| github.com/jackc/puddle v1.3.0 // indirect | ||
| github.com/magiconair/properties v1.8.7 // indirect | ||
| github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect | ||
| github.com/mitchellh/copystructure v1.0.0 // indirect | ||
| github.com/klauspost/compress v1.17.11 // indirect | ||
| github.com/magiconair/properties v1.8.9 // indirect | ||
| github.com/mitchellh/copystructure v1.2.0 // indirect | ||
| github.com/mitchellh/mapstructure v1.5.0 // indirect | ||
| github.com/mitchellh/reflectwalk v1.0.0 // indirect | ||
| github.com/pelletier/go-toml/v2 v2.1.0 // indirect | ||
| github.com/mitchellh/reflectwalk v1.0.2 // indirect | ||
| github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect | ||
| github.com/pelletier/go-toml/v2 v2.2.3 // indirect | ||
| github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect | ||
| github.com/prometheus/client_model v0.4.1-0.20230718164431-9a2bf3000d16 // indirect | ||
| github.com/prometheus/common v0.45.0 // indirect | ||
| github.com/prometheus/procfs v0.11.1 // indirect | ||
| github.com/sagikazarmark/locafero v0.3.0 // indirect | ||
| github.com/prometheus/client_model v0.6.1 // indirect | ||
| github.com/prometheus/common v0.62.0 // indirect | ||
| github.com/prometheus/procfs v0.15.1 // indirect | ||
| github.com/sagikazarmark/locafero v0.7.0 // indirect | ||
| github.com/sagikazarmark/slog-shim v0.1.0 // indirect | ||
| github.com/shopspring/decimal v1.4.0 // indirect | ||
| github.com/sourcegraph/conc v0.3.0 // indirect | ||
| github.com/spf13/afero v1.10.0 // indirect | ||
| github.com/spf13/cast v1.5.1 // indirect | ||
| github.com/spf13/afero v1.12.0 // indirect | ||
| github.com/spf13/cast v1.7.1 // indirect | ||
| github.com/spf13/pflag v1.0.5 // indirect | ||
| github.com/subosito/gotenv v1.6.0 // indirect | ||
| go.uber.org/atomic v1.9.0 // indirect | ||
| go.uber.org/multierr v1.9.0 // indirect | ||
| golang.org/x/crypto v0.20.0 // indirect | ||
| golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa // indirect | ||
| golang.org/x/sys v0.17.0 // indirect | ||
| golang.org/x/text v0.14.0 // indirect | ||
| google.golang.org/protobuf v1.31.0 // indirect | ||
| go.uber.org/multierr v1.11.0 // indirect | ||
| golang.org/x/crypto v0.32.0 // indirect | ||
| golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 // indirect | ||
| golang.org/x/sys v0.29.0 // indirect | ||
| golang.org/x/text v0.21.0 // indirect | ||
| google.golang.org/protobuf v1.36.3 // indirect | ||
| gopkg.in/ini.v1 v1.67.0 // indirect | ||
| gopkg.in/yaml.v3 v3.0.1 // indirect | ||
| ) | ||
|
|
||
| replace golang.org/x/crypto => golang.org/x/crypto v0.32.0 | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the specific dependency that was originally triggering static code analysis alerts because of https://nvd.nist.gov/vuln/detail/CVE-2024-45337 . I had to add the explicit
replacebecause the static code analysis tool would alert on any mention of an affected version ingo.sum. It may make sense to remove it for general purposes; I think the analysis tool raising alerts on those is bad behaviour.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Remove the replace you mean?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah. I don't know if it does any harm, but I just figure you probably don't want a random assortment of these starting to accumulate because of one very specific use case that I already have a fork for.