mirror of
https://github.com/status-im/consul.git
synced 2025-01-11 22:34:55 +00:00
86b0818c1f
security: upgrade vault/api to remove go-jose.v2 This dependency has an open vulnerability (GO-2024-2631), and is no longer needed by the latest `vault/api`. This is a follow-up to the upgrade of `go-jose/v3` in this repository to make all our dependencies consolidate on v3. Also remove the recently added security scan triage block for GO-2024-2631, which was added due to incorrect reports that `go-jose/v3@3.0.3` was impacted; in reality, is was this indirect client dependency (not impacted by CVE) that the scanner was flagging. A bug report has been filed to address the incorrect reporting.
25 lines
851 B
Modula-2
25 lines
851 B
Modula-2
module github.com/hashicorp/consul/proto-public
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
github.com/stretchr/testify v1.8.4
|
|
golang.org/x/exp v0.0.0-20230817173708-d852ddb80c63
|
|
google.golang.org/grpc v1.56.3
|
|
google.golang.org/protobuf v1.33.0
|
|
)
|
|
|
|
require (
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
golang.org/x/net v0.24.0 // indirect
|
|
golang.org/x/sys v0.19.0 // indirect
|
|
golang.org/x/text v0.14.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect
|
|
gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|