Bump github.com/argoproj/argo-cd/v2 from 2.6.15 to 2.9.20 #27
+188
−426
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -3,24 +3,25 @@ module github.com/chime/mani-diffy | |||||
| go 1.20 | ||||||
|
|
||||||
| require ( | ||||||
| github.com/argoproj/argo-cd/v2 v2.9.20 | ||||||
| gopkg.in/yaml.v3 v3.0.1 | ||||||
| k8s.io/apimachinery v0.24.17 | ||||||
| ) | ||||||
|
|
||||||
| require ( | ||||||
| cloud.google.com/go/compute v1.20.1 // indirect | ||||||
| cloud.google.com/go/compute/metadata v0.2.3 // indirect | ||||||
| dario.cat/mergo v1.0.0 // indirect | ||||||
| github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect | ||||||
| github.com/MakeNowJust/heredoc v0.0.0-20170808103936-bb23615498cd // indirect | ||||||
| github.com/Masterminds/semver/v3 v3.2.1 // indirect | ||||||
| github.com/Microsoft/go-winio v0.6.1 // indirect | ||||||
| github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect | ||||||
| github.com/argoproj/gitops-engine v0.7.1-0.20240715141028-c68bce0f979c // indirect | ||||||
| github.com/argoproj/pkg v0.13.7-0.20230627120311-a4dd357b057e // indirect | ||||||
| github.com/bmatcuk/doublestar/v4 v4.6.0 // indirect | ||||||
| github.com/bombsimon/logrusr/v2 v2.0.1 // indirect | ||||||
| github.com/bradleyfalzon/ghinstallation/v2 v2.6.0 // indirect | ||||||
| github.com/cespare/xxhash/v2 v2.2.0 // indirect | ||||||
| github.com/chai2010/gettext-go v0.0.0-20170215093142-bf70f2a70fb1 // indirect | ||||||
| github.com/cloudflare/circl v1.3.3 // indirect | ||||||
|
|
@@ -34,32 +35,30 @@ require ( | |||||
| github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect | ||||||
| github.com/fatih/camelcase v1.0.0 // indirect | ||||||
| github.com/fvbommel/sortorder v1.0.1 // indirect | ||||||
| github.com/go-errors/errors v1.4.2 // indirect | ||||||
| github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect | ||||||
| github.com/go-git/go-billy/v5 v5.5.0 // indirect | ||||||
| github.com/go-git/go-git/v5 v5.11.0 // indirect | ||||||
| github.com/go-logr/logr v1.2.4 // indirect | ||||||
| github.com/go-openapi/jsonpointer v0.19.5 // indirect | ||||||
| github.com/go-openapi/jsonreference v0.20.0 // indirect | ||||||
| github.com/go-openapi/swag v0.22.3 // indirect | ||||||
| github.com/go-redis/cache/v9 v9.0.0 // indirect | ||||||
| github.com/gobwas/glob v0.2.3 // indirect | ||||||
| github.com/gogo/protobuf v1.3.2 // indirect | ||||||
| github.com/golang-jwt/jwt/v4 v4.5.0 // indirect | ||||||
| github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect | ||||||
| github.com/golang/protobuf v1.5.4 // indirect | ||||||
| github.com/google/btree v1.1.2 // indirect | ||||||
| github.com/google/gnostic v0.6.9 // indirect | ||||||
| github.com/google/go-cmp v0.6.0 // indirect | ||||||
| github.com/google/go-github/v53 v53.2.0 // indirect | ||||||
| github.com/google/go-querystring v1.1.0 // indirect | ||||||
| github.com/google/gofuzz v1.2.0 // indirect | ||||||
| github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect | ||||||
| github.com/google/uuid v1.3.0 // indirect | ||||||
| github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect | ||||||
| github.com/imdario/mergo v0.3.16 // indirect | ||||||
| github.com/inconshreveable/mousetrap v1.1.0 // indirect | ||||||
| github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect | ||||||
| github.com/jonboulle/clockwork v0.2.2 // indirect | ||||||
|
|
@@ -78,60 +77,60 @@ require ( | |||||
| github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect | ||||||
| github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect | ||||||
| github.com/opencontainers/go-digest v1.0.0 // indirect | ||||||
| github.com/opencontainers/image-spec v1.1.0-rc4 // indirect | ||||||
| github.com/patrickmn/go-cache v2.1.0+incompatible // indirect | ||||||
| github.com/peterbourgon/diskv v2.0.1+incompatible // indirect | ||||||
| github.com/pjbgf/sha1cd v0.3.0 // indirect | ||||||
| github.com/pkg/errors v0.9.1 // indirect | ||||||
| github.com/redis/go-redis/v9 v9.0.5 // indirect | ||||||
| github.com/robfig/cron/v3 v3.0.1 // indirect | ||||||
| github.com/russross/blackfriday v1.6.0 // indirect | ||||||
| github.com/sergi/go-diff v1.1.0 // indirect | ||||||
| github.com/sirupsen/logrus v1.9.3 // indirect | ||||||
| github.com/skeema/knownhosts v1.2.2 // indirect | ||||||
| github.com/spf13/cobra v1.7.0 // indirect | ||||||
| github.com/spf13/pflag v1.0.5 // indirect | ||||||
| github.com/vmihailenco/go-tinylfu v0.2.2 // indirect | ||||||
| github.com/vmihailenco/msgpack/v5 v5.3.4 // indirect | ||||||
| github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect | ||||||
| github.com/xanzy/ssh-agent v0.3.3 // indirect | ||||||
| github.com/xlab/treeprint v1.1.0 // indirect | ||||||
| go.starlark.net v0.0.0-20220328144851-d1966c6b9fcd // indirect | ||||||
| golang.org/x/crypto v0.19.0 // indirect | ||||||
| golang.org/x/mod v0.12.0 // indirect | ||||||
| golang.org/x/net v0.19.0 // indirect | ||||||
| golang.org/x/oauth2 v0.11.0 // indirect | ||||||
| golang.org/x/sync v0.3.0 // indirect | ||||||
| golang.org/x/sys v0.17.0 // indirect | ||||||
| golang.org/x/term v0.17.0 // indirect | ||||||
| golang.org/x/text v0.14.0 // indirect | ||||||
| golang.org/x/time v0.3.0 // indirect | ||||||
| golang.org/x/tools v0.13.0 // indirect | ||||||
| google.golang.org/appengine v1.6.7 // indirect | ||||||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect | ||||||
| google.golang.org/grpc v1.56.3 // indirect | ||||||
| google.golang.org/protobuf v1.33.0 // indirect | ||||||
| gopkg.in/inf.v0 v0.9.1 // indirect | ||||||
| gopkg.in/warnings.v0 v0.1.2 // indirect | ||||||
| gopkg.in/yaml.v2 v2.4.0 // indirect | ||||||
| k8s.io/api v0.24.17 // indirect | ||||||
| k8s.io/apiextensions-apiserver v0.24.2 // indirect | ||||||
| k8s.io/apiserver v0.24.17 // indirect | ||||||
| k8s.io/cli-runtime v0.24.17 // indirect | ||||||
| k8s.io/client-go v0.24.17 // indirect | ||||||
| k8s.io/component-base v0.24.17 // indirect | ||||||
| k8s.io/component-helpers v0.24.17 // indirect | ||||||
| k8s.io/klog/v2 v2.70.1 // indirect | ||||||
| k8s.io/kube-aggregator v0.24.2 // indirect | ||||||
| k8s.io/kube-openapi v0.0.0-20220627174259-011e075b9cb8 // indirect | ||||||
| k8s.io/kubectl v0.24.2 // indirect | ||||||
| k8s.io/kubernetes v1.24.17 // indirect | ||||||
|
There was a problem hiding this comment. The following vulnerabilities impact k8s.io/kubernetes versions <1.27.16: CVE-2021-25743, CVE-2023-5528, CVE-2024-3177, CVE-2024-5321. These can be remediated by updating to version 1.27.16 or higher.
Suggested change
|
||||||
| k8s.io/utils v0.0.0-20220706174534-f6158b442e7c // indirect | ||||||
| oras.land/oras-go/v2 v2.3.0 // indirect | ||||||
| sigs.k8s.io/json v0.0.0-20220525155127-227cbc7cc124 // indirect | ||||||
| sigs.k8s.io/kustomize/api v0.11.5 // indirect | ||||||
| sigs.k8s.io/kustomize/kyaml v0.13.7 // indirect | ||||||
| sigs.k8s.io/structured-merge-diff/v4 v4.3.0 // indirect | ||||||
| sigs.k8s.io/yaml v1.3.0 // indirect | ||||||
| ) | ||||||
|
|
||||||
|
|
||||||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The following vulnerabilities impact k8s.io/kubernetes versions <1.27.16: CVE-2021-25743, CVE-2023-5528, CVE-2024-3177, CVE-2024-5321.
These can be remediated by updating to version 1.27.16 or higher.