Mirroristas/etcd
2
0
Fork 0
mirror of https://github.com/etcd-io/etcd.git synced 2024-09-27 06:25:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,814 Commits 15 Branches 491 Tags 148 MiB
Commit Graph

72 Commits

Author SHA1 Message Date
James Blair
8cfd1f550b
depdendency: bump golang.org/x/net from 0.19.0 to 0.20.0. 
Signed-off-by: James Blair <mail@jamesblair.net>
 2024-01-17 22:33:22 +13:00
Sharath Sivakumar
28f4c6fef6
dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.1 to 2.19.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2024-01-09 16:26:47 +01:00
Sharath Sivakumar
98646057d6
dependency: bump golang.org/x/sys from 0.15.0 to 0.16.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2024-01-09 16:04:19 +01:00
Sharath Sivakumar
c21b966478
dependency: bump google.golang.org/protobuf from 1.31.0 to 1.32.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2023-12-27 17:27:40 +01:00
dependabot[bot]
0c55ed7464 build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.1 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.60.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.59.0...v1.60.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-21 19:07:47 +00:00
Sharath Sivakumar
235ec793fd
dependency: bump golang.org/x/net from 0.18.0 to 0.19.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2023-12-06 13:44:54 +01:00
vivekpatani
2afd2ddee5 *: bump golang.org/x/sys to 0.15.0 
- https://github.com/etcd-io/etcd/pull/17029

Signed-off-by: vivekpatani <9080894+vivekpatani@users.noreply.github.com>
 2023-11-30 10:13:29 -08:00
Sharath Sivakumar
33b526f58d
dependency: bump golang.org/x/net from 0.17.0 to 0.18.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2023-11-16 11:03:00 +01:00
Sharath Sivakumar
7586098f78
dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.0 to 2.18.1 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2023-11-16 10:44:50 +01:00
vivekpatani
ed30fb1226 *: bump golang.org/x/sys from 0.13.0 to 0.14.0 
- https://github.com/etcd-io/etcd/pull/16875

Signed-off-by: vivekpatani <9080894+vivekpatani@users.noreply.github.com>
 2023-11-09 11:02:36 -06:00
James Blair
e6e740fb80
depdendency: bump google.golang.org/grpc from 1.58.3 to 1.59.0. 
Signed-off-by: James Blair <mail@jamesblair.net>
 2023-10-24 17:39:39 +13:00
Allen Ray
e4c0eb7712 bump google.golang.org/grpc to v1.58.3 
Signed-off-by: Allen Ray <alray@redhat.com>
 2023-10-11 10:39:05 -04:00
Allen Ray
3a61187ce3 bump golang.org/x/net to v0.17.0 
Address CVE-2023-39325 and CVE-2023-44487

Signed-off-by: Allen Ray <alray@redhat.com>
 2023-10-11 10:09:14 -04:00
Sharath Sivakumar
1b1c42a7aa
dependency: bump golang.org/x/net from 0.15.0 to 0.16.0 
Signed-off-by: Sharath Sivakumar <mailssr9@gmail.com>
 2023-10-10 11:49:35 +02:00
Benjamin Wang
df7f2d93f8 dependency: bump google.golang.org/grpc from 1.58.1 to 1.58.2 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-09-25 20:53:56 +01:00
sharathsivakumar
2048a638fc
dependency: bump google.golang.org/grpc from 1.58.0/1.57.0 to 1.58.1 
Signed-off-by: sharathsivakumar <mailssr9@gmail.com>
 2023-09-21 19:54:54 +02:00
Benjamin Wang
ea2d60cad7 dependency: bump grpc-gateway from 2.17.1 to 2.18.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-09-19 12:17:22 +01:00
Benjamin Wang
de41d4d8aa dependency: set github.com/grpc-ecosystem/grpc-gateway/v2 version to 2.17.1 for all modules 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-09-18 11:22:16 +01:00
Allen Ray
cc130fd2d4 Update to go1.21 
Signed-off-by: Allen Ray <alray@redhat.com>
 2023-09-13 10:10:02 -04:00
Benjamin Wang
2a0613bc22 dependency: bump google.golang.org/grpc to 1.58.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-09-12 10:47:14 +01:00
Benjamin Wang
909d795601 dependency: bump golang.org/x/net from v0.14.0 to v0.15.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-09-11 19:36:18 +01:00
sharathsivakumar
e47d10fca7
dependency: bump golang.org/x/sys from 0.11.0 to 0.12.0 
Signed-off-by: sharathsivakumar <mailssr9@gmail.com>
 2023-09-09 16:19:54 +02:00
Jordan Liggitt
6599dec92b
dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from v2.7.0 to v2.17.1 
Signed-off-by: Jordan Liggitt <liggitt@google.com>
 2023-09-07 08:49:57 -04:00
James Blair
b6d123d08b
Update to golang 1.20 minor release. 
Signed-off-by: James Blair <mail@jamesblair.net>
 2023-08-11 15:03:48 +12:00
chaochn47
6757c444c5 2023-08-10 bump up dependencies 
Signed-off-by: chaochn47 <chaochn@amazon.com>
 2023-08-10 09:13:34 +08:00
James Blair
f7126aa1c3
depdendency: bump golang.org/x/sys from 0.10.0 to 0.11.0. 
Signed-off-by: James Blair <mail@jamesblair.net>
 2023-08-06 19:02:15 +12:00
=
418bab0ed4 dependency: bump golang.org/x/net 0.12.0 to 0.13.0 
Co-authored-by: James Blair <mail@jamesblair.net>
Signed-off-by: = <abby.crimlis@outlook.com>
 2023-08-04 09:09:16 +12:00
Chao Chen
24c6fb4b4d Fix 15877 and bump up gRPC from v1.52.0 to v1.57.0 
Signed-off-by: Chao Chen <chaochn@amazon.com>
 2023-07-31 13:57:24 -07:00
Chao Chen
e59e3d709c dependency: bump google.golang.org/grpc from 1.51.0 to 1.52.0 
Signed-off-by: Chao Chen <chaochn@amazon.com>
 2023-07-27 13:25:12 -07:00
Benjamin Wang
2c22ca7eba dependency: bump golang.org/x/net from v0.11.0 to v0.12.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-07-10 18:43:30 +01:00
Benjamin Wang
149256735d dependency: bump golang.org/x/sys from v0.9.0 to v0.10.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-07-10 18:38:16 +01:00
ArkaSaha30
37bd1e3382
Bump dependency manually 
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
 2023-06-28 12:39:27 +05:30
Benjamin Wang
b92d099360 dependency: bump golang.org/x/net from 0.10.0 to 0.11.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-06-19 09:25:07 +01:00
Prasad Chandrasekaran
3a8c6d749f manual dependency bump 
Signed-off-by: Prasad Chandrasekaran <prasadc@vmware.com>
 2023-06-13 23:28:47 +05:30
Chao Chen
b2c39fc8e6 2023-06-06: bump up dependencies update identified by dependabot 
Signed-off-by: Chao Chen <chaochn@amazon.com>
 2023-06-06 20:18:44 -07:00
Bogdan Kanivets
ef91e8ae78 dependency: bump github.com/stretchr/testify from 1.8.2 to 1.8.3 
Signed-off-by: Bogdan Kanivets <bkanivets@apple.com>
 2023-05-24 23:58:13 -07:00
Prasad Chandrasekaran
9878b134eb dependency: bump indirect dependencies 
Signed-off-by: Prasad Chandrasekaran <prasadc@vmware.com>
 2023-05-11 18:00:12 +05:30
Benjamin Wang
eb9b15bf49 dependency: bump golang.org/x/net from 0.8.0 to 0.9.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-11 08:44:26 +08:00
Benjamin Wang
072c5cb5da dependency: bump google.golang.org/protobuf from 1.28.1 to 1.30.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-04 15:28:09 +08:00
Benjamin Wang
56284d5dfe dependency: bump github.com/golang/protobuf from 1.5.2 to 1.5.3 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-04 15:21:22 +08:00
Benjamin Wang
7ed1219861 dependency: bump golang.org/x/net to v0.8.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-03-07 06:52:07 +08:00
Benjamin Wang
d8b8127084 dependency: bump github.com/stretchr/testify from 1.8.1 to 1.8.2 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-02-28 06:44:33 +08:00
Benjamin Wang
a7e94c4843 security: bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-02-17 11:29:47 +08:00
Benjamin Wang
5b8d7698c8 dependency: bump github.com/coreos/go-semver from 0.3.0 to 0.3.1 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-01-24 16:59:37 +08:00
Benjamin Wang
c51540bdd2 deps: bump google.golang.org/protobuf from 1.28.0 to 1.28.1 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2022-12-14 04:07:52 +08:00
Benjamin Wang
1ba246e1d8 bump golang.org/x/ to v0.4.0 
Found 1 known vulnerability.

Vulnerability #1: GO-2022-1144
  An attacker can cause excessive memory growth in a Go server
  accepting HTTP/2 requests. HTTP/2 server connections contain a
  cache of HTTP header keys sent by the client. While the total
  number of entries in this cache is capped, an attacker sending
  very large keys can cause the server to allocate approximately
  64 MiB per open connection.

  Call stacks in your code:
Error:       tools/etcd-dump-metrics/main.go:158:5: go.etcd.io/etcd/v3/tools/etcd-dump-metrics.main calls go.etcd.io/etcd/server/v3/embed.StartEtcd, which eventually calls golang.org/x/net/http2.Server.ServeConn

  Found in: golang.org/x/net/http2@v0.2.0
  Fixed in: golang.org/x/net/http2@v0.4.0
  More info: https://pkg.go.dev/vuln/GO-2022-1144
Error: Process completed with exit code 3.

Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2022-12-09 08:54:48 +08:00
Benjamin Wang
3f86db5e53 bump golang.org/x imports to address CVEs 
Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32149

Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2022-11-30 05:03:43 +08:00
Benjamin Wang
285e44378f bump github.com/stretchr/testify from v1.7.2 to v1.8.1 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2022-11-26 10:51:32 +08:00
Wei Fu
cf285ea3c7 bump grpc to v1.51.0 from v1.47.0 
Signed-off-by: Wei Fu <fuweid89@gmail.com>
 2022-11-23 22:16:22 +08:00
Benjamin Wang
cd0b1d0c66 Bump go 1.19: upgrade go version to 1.19 in all go.mod files 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2022-09-22 08:47:46 +08:00