Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: critical and high vulnerabilities (Cr 24607 sync v1.9.2) #378

Closed
wants to merge 124 commits into from
Closed

fix: critical and high vulnerabilities (Cr 24607 sync v1.9.2) #378

wants to merge 124 commits into from

Conversation

kim-codefresh
Copy link

Checklist:

scubbo and others added 30 commits February 13, 2024 11:24
@scubbo @whynowy
Update quick_start.md (argoproj#2965)
cf169ff 
Signed-off-by: Derek Wang <[email protected]>
@dependabot @whynowy
chore(deps): bump github.com/Azure/azure-event-hubs-go/v3 from 3.6.0 …
e8ea111 
…to 3.6.2 (argoproj#2972)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.155.0 to 0.156.0 (argo…
e765f50 
…proj#2974)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/nats-io/nats.go from 1.31.0 to 1.32.0 (a…
ffd53d5 
…rgoproj#2975)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.156.0 to 0.157.0 (argo…
a387d5c 
…proj#2981)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity fr…
914490e 
…om 1.4.0 to 1.5.1 (argoproj#2983)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/xanzy/go-gitlab from 0.95.2 to 0.96.0 (a…
1bc102b 
…rgoproj#2982)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/cloudevents/sdk-go/v2 from 2.13.0 to 2.1…
8fa1ae5 
…5.0 (argoproj#2984)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump cloud.google.com/go/pubsub from 1.33.0 to 1.34.0 (a…
2cc883b 
…rgoproj#2985)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/messaging/azs…
fcf98dd 
…ervicebus from 1.5.0 to 1.6.0 (argoproj#2986)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump actions/cache from 3 to 4 (argoproj#2987)
74f47a9 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@BabisK @whynowy
Replace url https://not-existing.com/ with https://invalid.com/ (argo…
1220e33 
…proj#2993) (argoproj#2994)

Signed-off-by: Babis Kaidos <[email protected]>
@zhaque44 @whynowy
adding base/kafka_test.go for code coverage (argoproj#2990)
4f9e283 
Signed-off-by: zhaque44 <[email protected]>
@dependabot @whynowy
chore(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 (argop…
5c4b0d4 
…roj#2998)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump cloud.google.com/go/pubsub from 1.34.0 to 1.36.0 (a…
2e4a178 
…rgoproj#2999)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 (argopro…
ff9de1f 
…j#3001)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.157.0 to 0.159.0 (argo…
33a5cef 
…proj#3000)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@eduardodbr @whynowy
feat: add waitTime config field to azure queue storage event source (a…
ab388a0 
…rgoproj#2996)

Signed-off-by: eduardodbr <[email protected]>
@dependabot @whynowy
chore(deps): bump peter-evans/create-pull-request from 5 to 6 (argopr…
c5d24d5 
…oj#3005)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (argo…
6e547f1 
…proj#3006)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/apache/pulsar-client-go from 0.11.1 to 0…
58fd5c5 
….12.0 (argoproj#3007)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump cloud.google.com/go/pubsub from 1.36.0 to 1.36.1 (a…
08bc41e 
…rgoproj#3008)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.159.0 to 0.161.0 (argo…
9ace10d 
…proj#3009)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 (argoproj…
9c1617a 
…#3012)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/xanzy/go-gitlab from 0.96.0 to 0.97.0 (a…
0ece63f 
…rgoproj#3014)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/IBM/sarama from 1.42.0 to 1.42.2 (argopr…
609570f 
…oj#3015)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.161.0 to 0.163.0 (argo…
515c822 
…proj#3013)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.73 to 0.9.…
ffd9b98 
…75 (argoproj#3011)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@whynowy
chore: upgrade argo to 3.5.4
a1626b6 
Signed-off-by: Derek Wang <[email protected]>
@whynowy
Update manifests to v1.9.1
dd277ad 
Signed-off-by: Derek Wang <[email protected]>
dependabot bot and others added 28 commits June 13, 2024 16:56
@dependabot @whynowy
chore(deps): bump github.com/minio/minio-go/v7 from 7.0.69 to 7.0.70 (a…
a49dae9 
…rgoproj#3120)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@AllenZMC @whynowy
fix spelling error (argoproj#3114)
8ace21b 
Signed-off-by: czm <[email protected]>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.176.1 to 0.177.0 (argo…
387bed6 
…proj#3122)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/xanzy/go-gitlab from 0.103.0 to 0.105.0 (a…
6a30303 
…rgoproj#3123)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/rabbitmq/amqp091-go from 1.8.1 to 1.10.0 (…
762da53 
…argoproj#3125)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump cloud.google.com/go/pubsub from 1.37.0 to 1.38.0 (a…
9dd42d4 
…rgoproj#3124)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/go-resty/resty/v2 from 2.12.0 to 2.13.1 (a…
c62f49e 
…rgoproj#3126)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/prometheus/client_golang from 1.19.0 to …
239229c 
…1.19.1 (argoproj#3128)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.177.0 to 0.180.0 (argo…
48746c0 
…proj#3129)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/go-swagger/go-swagger from 0.30.4 to 0.3…
46c36ea 
…1.0 (argoproj#3138)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/nats-io/nats.go from 1.34.1 to 1.35.0 (a…
7b2253a 
…rgoproj#3139)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 (argo…
46a68b8 
…proj#3140)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/slack-go/slack from 0.12.5 to 0.13.0 (ar…
decb1fe 
…goproj#3141)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@florian-feicht @whynowy
Use authorized key parsing instead of reading binary certificates (ar…
7d8068a 
…goproj#3113)

Signed-off-by: florian-feicht <[email protected]>
@sysr9 @whynowy
Optional use QueueSubscribe for NATS events source (argoproj#3131)
5461296 
Signed-off-by: sysr9 <[email protected]>
@dependabot @whynowy
chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.79 to 0.9.…
6f6d6b5 
…80 (argoproj#3145)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/messaging/azs…
f5f394e 
…ervicebus from 1.7.0 to 1.7.1 (argoproj#3146)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nlamirault @whynowy
feat: new Prometheus metrics build_info (argoproj#3144)
97cbbd0 
Signed-off-by: Nicolas Lamirault <[email protected]>
@aaron-arellano @whynowy
Add more EventSource event logs for failed to publish events (argopro…
4cb99d9 
…j#3147)

Signed-off-by: Derek Wang <[email protected]>
@dependabot @whynowy
chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.1…
a661561 
…0.0 to 2.11.0 (argoproj#3149)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (argop…
4fa9646 
…roj#3152)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump github.com/itchyny/gojq from 0.12.15 to 0.12.16 (ar…
94b9cde 
…goproj#3154)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @whynowy
chore(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 (argoproj…
09e4624 
…#3155)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@whynowy
Update manifests to v1.9.2
8dd63f1 
Signed-off-by: Derek Wang <[email protected]>
@kim-codefresh
resolve conflicts
eebd5cc
@kim-codefresh
upgrade version
e0e9c3b
@kim-codefresh
resolve conflict
fe466cd
@kim-codefresh
generate codegen
1bda840
@kim-codefresh kim-codefresh deleted the CR-24607-sync-v1.9.2 branch July 18, 2024 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.