mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-06 04:46:25 +02:00
Resolve GHSA-x744-4wpc-v9h2 and GHSA-pxq6-2prw-chj9 in `vault` by replacing `github.com/docker/docker` with `github.com/moby/moby/client` @ `v0.3.0` and `github.com/moby/moby/api` @ `v1.54.0`. This is necessary as `docker/docker` is no longer maintained and the fixes are not available in it. Resolve GO-2026-4518, GHSA-x6gf-mpr2-68h6 and GHSA-jqcq-xjh3-6g23 by upgrading to github.com/jackc/pgx/v5. This is necessary as v4 is not longer maitained. Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Ryan Cragun <me@ryan.ec>
86 lines
3.6 KiB
Modula-2
86 lines
3.6 KiB
Modula-2
module github.com/hashicorp/vault/tools/pipeline
|
|
|
|
go 1.25.0
|
|
|
|
// We have test modules in here but they ought to be completely ignored
|
|
ignore internal/pkg/golang/fixtures
|
|
|
|
require (
|
|
github.com/Masterminds/semver v1.5.0
|
|
github.com/PuerkitoBio/goquery v1.11.0
|
|
github.com/avast/retry-go/v4 v4.6.1
|
|
github.com/google/go-github/v83 v83.0.0
|
|
github.com/hashicorp/hcl/v2 v2.24.0
|
|
github.com/hashicorp/releases-api v0.2.3
|
|
github.com/jedib0t/go-pretty/v6 v6.6.8
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
|
|
github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7
|
|
github.com/spf13/cobra v1.9.1
|
|
github.com/stretchr/testify v1.11.1
|
|
github.com/veqryn/slog-context v0.8.0
|
|
github.com/zclconf/go-cty v1.17.0
|
|
golang.org/x/mod v0.29.0
|
|
golang.org/x/oauth2 v0.31.0
|
|
)
|
|
|
|
require (
|
|
github.com/agext/levenshtein v1.2.3 // indirect
|
|
github.com/andybalholm/cascadia v1.3.3 // indirect
|
|
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/fatih/color v1.18.0 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-openapi/analysis v0.23.0 // indirect
|
|
github.com/go-openapi/errors v0.22.2 // indirect
|
|
github.com/go-openapi/jsonpointer v0.21.2 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.0 // indirect
|
|
github.com/go-openapi/loads v0.22.0 // indirect
|
|
github.com/go-openapi/runtime v0.28.0 // indirect
|
|
github.com/go-openapi/spec v0.21.0 // indirect
|
|
github.com/go-openapi/strfmt v0.23.0 // indirect
|
|
github.com/go-openapi/swag v0.23.1 // indirect
|
|
github.com/go-openapi/validate v0.24.0 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/go-querystring v1.2.0 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/hashicorp/go-hclog v1.6.3 // indirect
|
|
github.com/hashicorp/go-uuid v1.0.3 // indirect
|
|
github.com/hashicorp/go-version v1.7.0 // indirect
|
|
github.com/imdario/mergo v0.3.16 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jackc/pgx/v5 v5.9.1 // indirect
|
|
github.com/jessevdk/go-flags v1.6.1 // indirect
|
|
github.com/josharian/intern v1.0.0 // indirect
|
|
github.com/mailru/easyjson v0.9.0 // indirect
|
|
github.com/mattn/go-colorable v0.1.14 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/mattn/go-runewidth v0.0.16 // indirect
|
|
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
|
|
github.com/mitchellh/hashstructure v1.1.0 // indirect
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
|
github.com/mitchellh/pointerstructure v1.2.1 // indirect
|
|
github.com/oklog/ulid v1.3.1 // indirect
|
|
github.com/oklog/ulid/v2 v2.1.1 // indirect
|
|
github.com/opentracing/opentracing-go v1.2.0 // indirect
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
|
github.com/shurcooL/graphql v0.0.0-20230722043721-ed46e5a46466 // indirect
|
|
github.com/spf13/pflag v1.0.7 // indirect
|
|
go.mongodb.org/mongo-driver v1.17.4 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/otel v1.40.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.40.0 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.40.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.40.0 // indirect
|
|
golang.org/x/net v0.47.0 // indirect
|
|
golang.org/x/sync v0.18.0 // indirect
|
|
golang.org/x/sys v0.40.0 // indirect
|
|
golang.org/x/text v0.31.0 // indirect
|
|
golang.org/x/tools v0.38.0 // indirect
|
|
google.golang.org/protobuf v1.36.8 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|