status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/sdk
History
Michael Zalimeni 86b0818c1f
[NET-8601] security: upgrade vault/api to remove go-jose.v2 (#20910) 
security: upgrade vault/api to remove go-jose.v2

This dependency has an open vulnerability (GO-2024-2631), and is no
longer needed by the latest `vault/api`. This is a follow-up to the
upgrade of `go-jose/v3` in this repository to make all our dependencies
consolidate on v3.

Also remove the recently added security scan triage block for
GO-2024-2631, which was added due to incorrect reports that
`go-jose/v3@3.0.3` was impacted; in reality, is was this indirect
client dependency (not impacted by CVE) that the scanner was flagging. A
bug report has been filed to address the incorrect reporting.
 		2024-05-04 00:18:51 +00:00
..
freeport Remove old build tags (#19128) 2023-10-10 10:58:06 -04:00
iptables Fix SDK iptables.Config marshalling (#20451) 2024-02-02 12:25:00 -06:00
testutil Retry lint fixes (#19151) 2023-12-06 12:11:32 -05:00
.copywrite.hcl [DO NOT MERGE UNTIL EOY] update year in LICENSE and copywrite files (#19780) 2024-01-02 08:41:12 -08:00
.golangci.yml
…
LICENSE [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
README.md
…
go.mod [NET-8601] security: upgrade vault/api to remove go-jose.v2 (#20910) 2024-05-04 00:18:51 +00:00
go.sum [NET-8601] security: upgrade vault/api to remove go-jose.v2 (#20910) 2024-05-04 00:18:51 +00:00

README.md

Internal SDK

Please note that this folder, while public, is not meant for new consumers of these libraries; this should currently be considered an internal, not external, SDK. It is public due to existing needs from other HashiCorp software. The tags in this folder will stay at the 0.x.y level; accordingly users should expect that things can move around, disappear, or change API at any time.