fix(deps): updated all dependencies to fix CVEs #3
Conversation
Signed-off-by: malmor <62105800+malmor@users.noreply.github.com>
Signed-off-by: malmor <62105800+malmor@users.noreply.github.com>
|
Hey @manhtukhang, But I was not able to test this inside a Vault instance. Can you take a look at it? We would love to see a new version being released with these changes! 🚀 Regards, |
The unit tests failed because vault/sdk v0.9.2 introduced a new check that I guess needs to be implemented - see [1]. By downgrading to v0.9.1 this error can be fixed - but has to be addressed in the future. This commit also fixes two linting errors and migrates the depguard configuration to the new v2 schema. This is required because the golangci-lint action bumped its dependency, see [2] and [3]. [1]: hashicorp/vault#22173 [2]: golangci/golangci-lint#3906 [3]: https://golangci-lint.run/usage/linters/#depguard Signed-off-by: malmor <62105800+malmor@users.noreply.github.com>
|
Hey @manhtukhang, I compiled a new plugin version based on the latest commit and was able to successfully install and use the plugin. As far as I can tell this new version should be working and ready for review/release. Regards, |
|
Hey @manhtukhang, Kind Regards, |
|
Hi @malmor, Sorry for the late response! I can merge this PR. Thank you for your contribution! |
This PR updates all dependencies and bumps the Go version to
1.19.This fixes multiple CVEs:
I also ran the linting - that's why a few smaller code changes are part of this PR.