Skip to content

Commit

Permalink
Update go-git to v5.13.1 for dependabot (#8126)
Browse files Browse the repository at this point in the history 
See https://github.com/buildbuddy-io/buildbuddy/security/dependabot/186
and https://github.com/buildbuddy-io/buildbuddy/security/dependabot/187
for details.
  • Loading branch information
@tempoz @dan-stowell
tempoz authored and dan-stowell committed Jan 7, 2025
1 parent 28ed410 commit ef13302
Show file tree
Hide file tree
Showing 3 changed files with 52 additions and 59 deletions.
44 changes: 22 additions & 22 deletions deps.bzl
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1178,8 +1178,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_cyphar_filepath_securejoin",
importpath = "github.com/cyphar/filepath-securejoin",
sum = "h1:Ugdm7cg7i6ZK6x3xDF1oEu1nfkyfH53EtKeQYTC3kyg=",
version = "v0.2.4",
sum = "h1:4d9N5ykBnSp5Xn2JkhocYDkOpURL/18CYMpo6xB9uWM=",
version = "v0.3.6",
)
go_repository(
name = "com_github_d2g_dhcp4",
Expand Down Expand Up @@ -1424,8 +1424,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_elazarl_goproxy",
importpath = "github.com/elazarl/goproxy",
sum = "h1:mATvB/9r/3gvcejNsXKSkQ6lcIaNec2nyfOdlTBR2lU=",
version = "v0.0.0-20230808193330-2592e75ae04a",
sum = "h1:xwIyKHbaP5yfT6O9KIeYJR5549MXRQkoQMRXGztz8YQ=",
version = "v1.2.3",
)
go_repository(
name = "com_github_emicklei_go_restful",
Expand Down Expand Up @@ -1608,8 +1608,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_gliderlabs_ssh",
importpath = "github.com/gliderlabs/ssh",
sum = "h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=",
version = "v0.3.5",
sum = "h1:a4YXD1V7xMF9g5nTkdfnja3Sxy1PVDCj1Zg4Wb8vY6c=",
version = "v0.3.8",
)
go_repository(
name = "com_github_go_chi_chi_v5",
Expand Down Expand Up @@ -1668,8 +1668,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_go_git_go_billy_v5",
importpath = "github.com/go-git/go-billy/v5",
sum = "h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=",
version = "v5.5.0",
sum = "h1:u+dcrgaguSSkbjzHwelEjc0Yj300NUevrrPphk/SoRA=",
version = "v5.6.1",
)
go_repository(
name = "com_github_go_git_go_git_fixtures_v4",
Expand All @@ -1680,8 +1680,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_go_git_go_git_v5",
importpath = "github.com/go-git/go-git/v5",
sum = "h1:XIZc1p+8YzypNr34itUfSvYJcv+eYdTnTvOZ2vD3cA4=",
version = "v5.11.0",
sum = "h1:DAQ9APonnlvSWpvolXWIuV6Q6zXy2wHbN4cVlNR5Q+M=",
version = "v5.13.1",
)
go_repository(
name = "com_github_go_gl_glfw",
Expand Down Expand Up @@ -3751,8 +3751,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_onsi_gomega",
importpath = "github.com/onsi/gomega",
sum = "h1:dsYjIxxSR755MDmKVsaFQTE22ChNBcuuTWgkUDSubOk=",
version = "v1.33.1",
sum = "h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k=",
version = "v1.34.1",
)
go_repository(
name = "com_github_open_policy_agent_opa",
Expand Down Expand Up @@ -3993,8 +3993,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_protonmail_go_crypto",
importpath = "github.com/ProtonMail/go-crypto",
sum = "h1:kkhsdkhsCvIsutKu5zLMgWtgh9YxGCNAw8Ad8hjwfYg=",
version = "v0.0.0-20230828082145-3c4c8a2d2371",
sum = "h1:nRBOetoydLeUb4nHajyO2bKqMLfWQ/ZPwkXqXxPxCFk=",
version = "v1.1.3",
)
go_repository(
name = "com_github_puerkitobio_purell",
Expand Down Expand Up @@ -4203,8 +4203,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_sergi_go_diff",
importpath = "github.com/sergi/go-diff",
sum = "h1:xkr+Oxo4BOQKmkn/B9eMK0g5Kg/983T9DqqPHwYqD+8=",
version = "v1.3.1",
sum = "h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=",
version = "v1.3.2-0.20230802210424-5b0b94c5c0d3",
)
go_repository(
name = "com_github_shazow_go_diff",
Expand Down Expand Up @@ -4293,8 +4293,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_skeema_knownhosts",
importpath = "github.com/skeema/knownhosts",
sum = "h1:SHWdIUa82uGZz+F+47k8SY4QhhI291cXCpopT1lK2AQ=",
version = "v1.2.1",
sum = "h1:AM+y0rI04VksttfwjkSTNQorvGqmwATnvnAHpSgc0LY=",
version = "v1.3.0",
)
go_repository(
name = "com_github_smacker_go_tree_sitter",
Expand Down Expand Up @@ -4419,8 +4419,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "com_github_stretchr_testify",
importpath = "github.com/stretchr/testify",
sum = "h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=",
version = "v1.9.0",
sum = "h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=",
version = "v1.10.0",
)
go_repository(
name = "com_github_subosito_gotenv",
Expand Down Expand Up @@ -6238,8 +6238,8 @@ def install_go_mod_dependencies(workspace_name = "buildbuddy"):
go_repository(
name = "org_golang_x_exp",
importpath = "golang.org/x/exp",
sum = "h1:yixxcjnhBmY0nkL253HFVIm0JsFHwrHdT3Yh6szTnfY=",
version = "v0.0.0-20240613232115-7f521ea00fb8",
sum = "h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8=",
version = "v0.0.0-20240719175910-8a7402abbf56",
)
go_repository(
name = "org_golang_x_exp_typeparams",
Expand Down
16 changes: 8 additions & 8 deletions go.mod
View file
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ require (
github.com/gabriel-vasile/mimetype v1.4.4
github.com/go-enry/go-enry/v2 v2.8.7
github.com/go-faker/faker/v4 v4.0.0-beta.3
github.com/go-git/go-git/v5 v5.11.0
github.com/go-git/go-git/v5 v5.13.1
github.com/go-redis/redis/extra/redisotel/v8 v8.11.5
github.com/go-redis/redis/v8 v8.11.5
github.com/go-sql-driver/mysql v1.8.1
Expand Down Expand Up @@ -118,7 +118,7 @@ require (
github.com/shurcooL/githubv4 v0.0.0-20231126234147-1cffa1f02456
github.com/sirupsen/logrus v1.9.3
github.com/smacker/go-tree-sitter v0.0.0-20230501083651-a7d92773b3aa
github.com/stretchr/testify v1.9.0
github.com/stretchr/testify v1.10.0
github.com/tebeka/selenium v0.9.9
github.com/throttled/throttled/v2 v2.12.0
github.com/tklauser/go-sysconf v0.3.11
Expand All @@ -136,7 +136,7 @@ require (
go.opentelemetry.io/otel/trace v1.31.0
go.uber.org/atomic v1.11.0
golang.org/x/crypto v0.31.0
golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
golang.org/x/mod v0.20.0
golang.org/x/oauth2 v0.22.0
golang.org/x/sync v0.10.0
Expand Down Expand Up @@ -182,7 +182,7 @@ require (
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
github.com/Microsoft/go-winio v0.6.2 // indirect
github.com/Microsoft/hcsshim v0.12.3 // indirect
github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
github.com/ProtonMail/go-crypto v1.1.3 // indirect
github.com/VictoriaMetrics/metrics v1.33.1 // indirect
github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
github.com/andybalholm/brotli v1.1.0 // indirect
Expand Down Expand Up @@ -229,7 +229,7 @@ require (
github.com/containernetworking/cni v1.2.3 // indirect
github.com/containernetworking/plugins v1.5.1 // indirect
github.com/crewjam/httperr v0.2.0 // indirect
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
github.com/cyphar/filepath-securejoin v0.3.6 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
Expand All @@ -251,7 +251,7 @@ require (
github.com/go-faster/city v1.0.1 // indirect
github.com/go-faster/errors v0.6.1 // indirect
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
github.com/go-git/go-billy/v5 v5.5.0 // indirect
github.com/go-git/go-billy/v5 v5.6.1 // indirect
github.com/go-jose/go-jose/v4 v4.0.1 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
Expand Down Expand Up @@ -350,11 +350,11 @@ require (
github.com/russellhaering/goxmldsig v1.4.0 // indirect
github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
github.com/segmentio/asm v1.2.0 // indirect
github.com/sergi/go-diff v1.3.1 // indirect
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
github.com/shoenig/go-m1cpu v0.1.6 // indirect
github.com/shopspring/decimal v1.3.1 // indirect
github.com/shurcooL/graphql v0.0.0-20230722043721-ed46e5a46466 // indirect
github.com/skeema/knownhosts v1.2.1 // indirect
github.com/skeema/knownhosts v1.3.0 // indirect
github.com/spf13/cast v1.5.1 // indirect
github.com/tklauser/numcpus v0.6.1 // indirect
github.com/valyala/fastrand v1.1.0 // indirect
Expand Down
Loading

0 comments on commit ef13302

Please sign in to comment.