mirror of
https://github.com/status-im/consul.git
synced 2025-01-14 07:44:50 +00:00
86b0818c1f
security: upgrade vault/api to remove go-jose.v2 This dependency has an open vulnerability (GO-2024-2631), and is no longer needed by the latest `vault/api`. This is a follow-up to the upgrade of `go-jose/v3` in this repository to make all our dependencies consolidate on v3. Also remove the recently added security scan triage block for GO-2024-2631, which was added due to incorrect reports that `go-jose/v3@3.0.3` was impacted; in reality, is was this indirect client dependency (not impacted by CVE) that the scanner was flagging. A bug report has been filed to address the incorrect reporting.
57 lines
2.1 KiB
Modula-2
57 lines
2.1 KiB
Modula-2
module github.com/hashicorp/consul/api
|
|
|
|
go 1.19
|
|
|
|
replace (
|
|
github.com/hashicorp/consul/proto-public => ../proto-public
|
|
github.com/hashicorp/consul/sdk => ../sdk
|
|
)
|
|
|
|
retract v1.28.0 // tag was mutated
|
|
|
|
require (
|
|
github.com/google/go-cmp v0.5.9
|
|
github.com/hashicorp/consul/proto-public v0.5.1
|
|
github.com/hashicorp/consul/sdk v0.15.0
|
|
github.com/hashicorp/go-cleanhttp v0.5.2
|
|
github.com/hashicorp/go-hclog v1.5.0
|
|
github.com/hashicorp/go-multierror v1.1.1
|
|
github.com/hashicorp/go-rootcerts v1.0.2
|
|
github.com/hashicorp/go-uuid v1.0.3
|
|
github.com/hashicorp/serf v0.10.1
|
|
github.com/mitchellh/mapstructure v1.5.0
|
|
github.com/stretchr/testify v1.8.4
|
|
golang.org/x/exp v0.0.0-20230817173708-d852ddb80c63
|
|
google.golang.org/protobuf v1.33.0
|
|
)
|
|
|
|
require (
|
|
github.com/armon/go-metrics v0.4.1 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/fatih/color v1.16.0 // indirect
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
|
github.com/google/btree v1.0.1 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
|
|
github.com/hashicorp/go-msgpack v0.5.5 // indirect
|
|
github.com/hashicorp/go-sockaddr v1.0.2 // indirect
|
|
github.com/hashicorp/go-version v1.2.1 // indirect
|
|
github.com/hashicorp/golang-lru v0.5.4 // indirect
|
|
github.com/hashicorp/memberlist v0.5.0 // indirect
|
|
github.com/mattn/go-colorable v0.1.13 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/miekg/dns v1.1.41 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
|
|
github.com/stretchr/objx v0.5.0 // indirect
|
|
golang.org/x/net v0.24.0 // indirect
|
|
golang.org/x/sync v0.2.0 // indirect
|
|
golang.org/x/sys v0.19.0 // indirect
|
|
golang.org/x/text v0.14.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect
|
|
google.golang.org/grpc v1.56.3 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|