Commit Graph

20 Commits

Author SHA1 Message Date
Alexander Wels
c9f956a4ee
bump golang.org/x/net to v0.33.0 (#3589)
Fixes CVE-2024-45338

Signed-off-by: Alexander Wels <awels@redhat.com>
2025-01-14 16:26:40 +01:00
Alex Kalenyuk
81c80f1440
Bump containers/image (#3364)
We can get quite a few fixed with the new version
which bumps some important indirect deps too.

Signed-off-by: Alex Kalenyuk <akalenyu@redhat.com>
2024-08-09 04:19:59 +02:00
Alexander Wels
50563e2120
Update vendor dependencies (#3296)
* Update vendor dependencies

In particular update the containers/image to 5.31.0
which removes a dependency that has an incompatible
license.

Signed-off-by: Alexander Wels <awels@redhat.com>

* Update gophercloud/utils to gophercloud/utils/v2
which no longer uses hashicorp/go-uuid but instead
uses gofrs/uuid/v5.

Signed-off-by: Alexander Wels <awels@redhat.com>

---------

Signed-off-by: Alexander Wels <awels@redhat.com>
2024-05-30 06:14:41 +02:00
alromeros
23165a6df4
CVE-2023-45288 fix: Bump golang.org/x/net to v0.23.0 (#3183)
Signed-off-by: Alvaro Romero <alromero@redhat.com>
2024-04-11 15:47:57 +02:00
Alex Kalenyuk
36fc5fee21
Switch version of go-jose (#3150)
square/go-jose has been archived by the owner since Feb 27, 2023
there is an active community fork - https://github.com/go-jose/go-jose/
with new bug fixes.

Signed-off-by: Alex Kalenyuk <akalenyu@redhat.com>
2024-03-27 02:43:22 +01:00
Michael Henriksen
a98bc9f0be
Update golang.org/x/net to 0.17.0 (#2930)
Address CVE-2023-39325 and CVE-2023-44487

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2023-10-20 02:35:03 +02:00
Alexander Wels
bd6335259d
Update golang to 1.20.7 (#2884)
* Update golang to 1.20.7

Use the cdi builder which is configured with golang 1.20.7
Updated some libraries to the latest version, specifically
excluding k8s and runtime-controller due to issues that need
to be resolved outside of this commit.

Signed-off-by: Alexander Wels <awels@redhat.com>

* Fix linter issue
Fix generate verify issue

Signed-off-by: Alexander Wels <awels@redhat.com>

* Ran make deps-update

Signed-off-by: Alexander Wels <awels@redhat.com>

* Fix cdi verify go mod

Signed-off-by: Alexander Wels <awels@redhat.com>

---------

Signed-off-by: Alexander Wels <awels@redhat.com>
2023-09-03 18:23:35 +02:00
Michael Henriksen
8cb11f53d9
update k8s libs to 1.26. (#2687)
* update k8s libs to 1.26.

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* remove some checks in log messages, they're redundant, and the format has changed

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* use 1.26 lib function `CheckVolumeModeMismatches` and `CheckAccessModes`

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

---------

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2023-04-18 19:30:40 +01:00
Maya Rashish
3c4ed8593a
Run make deps-update and update golang.org/x/crypto (#2225)
* Run `make deps-update` with no changes

It seems like #2208 generated things slightly differently than make
deps-update (perhaps with a different Go version).
Running this command changes two things:

- Re-order entries in BUILD.bazel, with no changes.
- Make vendor/kubevirt.io/containerized-data-importer-api a symlink to
staging/src/kubevirt.io/containerized-data-importer-api

These changes seem harmless.

Signed-off-by: Maya Rashish <mrashish@redhat.com>

* Update golang.org/x/crypto to v0.0.0-20220331220935-ae2d96664a29

We were prompted by a false positive vulnerability, but it's always good
to stay updated when it comes to cryptography libraries.

Signed-off-by: Maya Rashish <mrashish@redhat.com>
2022-04-05 20:47:41 +02:00
Michael Henriksen
d56e0cca05
23 libs (#2077)
Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2022-01-07 16:56:25 +01:00
Michael Henriksen
af155b9037
attempt to make dependabot happier (#1986)
Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2021-10-12 18:49:03 +02:00
Michael Henriksen
d92c2f459d
update deps and bazel (#1815)
* update deps and bazel

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* fix apidocs and unit tests

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* fix generate-verify

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2021-06-08 01:31:59 +02:00
Vishesh Tanksale
192509607a
Replacing Minio Client with AWS S3 sdk to add support for generic S3 endpoint (#1347)
* Replacing minio client with AWS s3 sdk to support generic S3 object store

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Updating unit test

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Removing changes related to default source

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Updating vendor folder with  make deps-update

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Running go-fmt

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Addressing review comments

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Support folders for s3 buckets

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

* Updating comments

Signed-off-by: Vishesh Ajay Tanksale <vtanksale@apple.com>

Co-authored-by: Vishesh Ajay Tanksale <vtanksale@apple.com>
2020-09-02 13:55:17 +02:00
Tomasz Barański
536af6b1ad
Replace skopeo (#1322)
* Updated dependencies
Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Replace skopeo with containers API.

This commit removes dependence on skopeo (binary) and uses containers
API. By doing that we're able to opimize the use of storage (scratch)
space, storage I/O and download bandwith.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Fixing rebase - dependencies kerfuffle.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Handling docker-format images as well as OCI.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Fix for missing code-generator module.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Remove regex, image file in registry images are matched by a path
prefix.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>

* Added nginx proxy in front of docker registry for a rate-limited access.

Signed-off-by: Tomasz Baranski <tbaransk@redhat.com>
2020-08-22 05:52:00 +02:00
Michael Henriksen
75f4fd6f2f
update k8s deps to 18.6 and controller runtime to 0.6.2 (#1330)
* update k8s deps to 1.18.6 and controller runtime to 0.6.2

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* remove building code generators from docker image.  This way the k8s ligray version only has to be updated in go.mod

Do more stuff in the bazel container.  Faster and better interop

Fix unit tests

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* make format

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* remove unnecessary rsync

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* redo code generator dep management

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>

* builder uses go modules

Signed-off-by: Michael Henriksen <mhenriks@redhat.com>
2020-08-07 14:09:52 +02:00
Alexander Wels
a67c64c338
initial bazelification of CDI (#986)
Signed-off-by: Alexander Wels <awels@redhat.com>
2019-10-15 15:55:44 -04:00
Alexander Wels
5acc1df798
Move dependency management to go modules instead of glide. (#989)
Signed-off-by: Alexander Wels <awels@redhat.com>
2019-10-09 15:02:17 -04:00
Michael Henriksen
7170ba40f6 update kubernetes client/tools to 1.12.4 and controller runtime to 0.1.9 2019-01-08 16:10:30 -05:00
Michael Henriksen
6e88eea42a update kubernetes libraries 1.11.2 (same as KubeVirt) 2018-10-19 20:12:41 -04:00
Jon Cope
e28d6cb937 updated deps, added some dummy returns so the thing compiles 2018-02-15 11:10:09 -06:00