Home Explore Help
Sign In
logic855
/
helm-external-secrets
mirror of https://github.com/external-secrets/external-secrets
1
0
Fork 0
Files Issues 0 Wiki
Browse Source

fix: bump jwt for cve fix (#4580)

* fix: bump jwt for cve fix

Signed-off-by: Gustavo Carvalho <gustavo@externalsecrets.com>

* fix: jwt v4

Signed-off-by: Gustavo Carvalho <gustavo@externalsecrets.com>

---------

Signed-off-by: Gustavo Carvalho <gustavo@externalsecrets.com>
Gustavo Fernandes de Carvalho 1 year ago
parent
7b9fa17765
commit
5ea203184e
4 changed files with 12 additions and 12 deletions
Unified View Show Diff Stats
  1. 2 2
      e2e/go.mod
  2. 4 4
      e2e/go.sum
  3. 2 2
      go.mod
  4. 4 4
      go.sum

+ 2 - 2
e2e/go.mod
View File 

@@ -54,7 +54,7 @@ require (
 
 	github.com/fluxcd/helm-controller/api v0.37.2
 
 	github.com/fluxcd/helm-controller/api v0.37.2
 
 	github.com/fluxcd/pkg/apis/meta v1.2.0
 
 	github.com/fluxcd/pkg/apis/meta v1.2.0
 
 	github.com/fluxcd/source-controller/api v1.2.3
 
 	github.com/fluxcd/source-controller/api v1.2.3
 
-	github.com/golang-jwt/jwt/v4 v4.5.1
 
+	github.com/golang-jwt/jwt/v4 v4.5.2
 
 	github.com/grafana/grafana-openapi-client-go v0.0.0-20250108132429-8d7e1f158f65
 
 	github.com/grafana/grafana-openapi-client-go v0.0.0-20250108132429-8d7e1f158f65
 
 	github.com/hashicorp/vault/api v1.16.0
 
 	github.com/hashicorp/vault/api v1.16.0
 
 	github.com/onsi/ginkgo/v2 v2.23.0
 
 	github.com/onsi/ginkgo/v2 v2.23.0
 
@@ -130,7 +130,7 @@ require (
 
 	github.com/godbus/dbus/v5 v5.1.0 // indirect
 
 	github.com/godbus/dbus/v5 v5.1.0 // indirect
 
 	github.com/gofrs/flock v0.12.1 // indirect
 
 	github.com/gofrs/flock v0.12.1 // indirect
 
 	github.com/gogo/protobuf v1.3.2 // indirect
 
 	github.com/gogo/protobuf v1.3.2 // indirect
 
-	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
 
+	github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
 
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 
 	github.com/golang/protobuf v1.5.4 // indirect
 
 	github.com/golang/protobuf v1.5.4 // indirect
 
 	github.com/google/btree v1.1.3 // indirect
 
 	github.com/google/btree v1.1.3 // indirect

+ 4 - 4
e2e/go.sum
View File 

@@ -244,11 +244,11 @@ github.com/goji/httpauth v0.0.0-20160601135302-2da839ab0f4d/go.mod h1:nnjvkQ9ptG
 
 github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
 github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
-github.com/golang-jwt/jwt/v4 v4.5.1 h1:JdqV9zKUdtaa9gdPlywC3aeoEsR681PlKC+4F5gQgeo=
 
-github.com/golang-jwt/jwt/v4 v4.5.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
+github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
 
+github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
 github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
 github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
-github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 
-github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
 
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=

+ 2 - 2
go.mod
View File 

@@ -83,7 +83,7 @@ require (
 
 	github.com/cyberark/conjur-api-go v0.12.12
 
 	github.com/cyberark/conjur-api-go v0.12.12
 
 	github.com/fortanix/sdkms-client-go v0.4.0
 
 	github.com/fortanix/sdkms-client-go v0.4.0
 
 	github.com/go-openapi/strfmt v0.23.0
 
 	github.com/go-openapi/strfmt v0.23.0
 
-	github.com/golang-jwt/jwt/v5 v5.2.1
 
+	github.com/golang-jwt/jwt/v5 v5.2.2
 
 	github.com/google/go-github/v56 v56.0.0
 
 	github.com/google/go-github/v56 v56.0.0
 
 	github.com/grafana/grafana-openapi-client-go v0.0.0-20250108132429-8d7e1f158f65
 
 	github.com/grafana/grafana-openapi-client-go v0.0.0-20250108132429-8d7e1f158f65
 
 	github.com/hashicorp/golang-lru v1.0.2
 
 	github.com/hashicorp/golang-lru v1.0.2
 
@@ -202,7 +202,7 @@ require (
 
 	github.com/gobuffalo/flect v1.0.3 // indirect
 
 	github.com/gobuffalo/flect v1.0.3 // indirect
 
 	github.com/goccy/go-json v0.10.5 // indirect
 
 	github.com/goccy/go-json v0.10.5 // indirect
 
 	github.com/gogo/protobuf v1.3.2 // indirect
 
 	github.com/gogo/protobuf v1.3.2 // indirect
 
-	github.com/golang-jwt/jwt/v4 v4.5.1 // indirect
 
+	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
 
 	github.com/golang/protobuf v1.5.4 // indirect
 
 	github.com/golang/protobuf v1.5.4 // indirect
 
 	github.com/google/go-querystring v1.1.0 // indirect
 
 	github.com/google/go-querystring v1.1.0 // indirect
 
 	github.com/google/gofuzz v1.2.0 // indirect
 
 	github.com/google/gofuzz v1.2.0 // indirect

+ 4 - 4
go.sum
View File 

@@ -349,11 +349,11 @@ github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69
 
 github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 
 github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
 github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
-github.com/golang-jwt/jwt/v4 v4.5.1 h1:JdqV9zKUdtaa9gdPlywC3aeoEsR681PlKC+4F5gQgeo=
 
-github.com/golang-jwt/jwt/v4 v4.5.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
+github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
 
+github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 
 github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
 github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
-github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 
-github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
 
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=