mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
26769754ad
Extracted log from govulncheck, suggesting that we should bump the version of golang.org/x/net === Symbol Results === Vulnerability #1: GO-2024-2687 HTTP/2 CONTINUATION flood in net/http More info: https://pkg.go.dev/vuln/GO-2024-2687 Module: golang.org/x/net Found in: golang.org/x/net@v0.17.0 Fixed in: golang.org/x/net@v0.23.0 Reference: - https://github.com/etcd-io/etcd/pull/17708 Signed-off-by: Chun-Hung Tseng <henrybear327@gmail.com>
35 lines
1.0 KiB
Modula-2
35 lines
1.0 KiB
Modula-2
module go.etcd.io/etcd/api/v3
|
|
|
|
go 1.21
|
|
|
|
toolchain go1.21.11
|
|
|
|
require (
|
|
github.com/coreos/go-semver v0.3.0
|
|
github.com/gogo/protobuf v1.3.2
|
|
github.com/golang/protobuf v1.5.4
|
|
github.com/grpc-ecosystem/grpc-gateway v1.16.0
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20230822172742-b8732ec3820d
|
|
google.golang.org/grpc v1.59.0
|
|
)
|
|
|
|
require (
|
|
golang.org/x/net v0.23.0 // indirect
|
|
golang.org/x/sys v0.18.0 // indirect
|
|
golang.org/x/text v0.14.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20230822172742-b8732ec3820d // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20230822172742-b8732ec3820d // indirect
|
|
google.golang.org/protobuf v1.33.0 // indirect
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
|
)
|
|
|
|
// Bad imports are sometimes causing attempts to pull that code.
|
|
// This makes the error more explicit.
|
|
replace (
|
|
go.etcd.io/etcd => ./FORBIDDEN_DEPENDENCY
|
|
go.etcd.io/etcd/api/v3 => ./FORBIDDEN_DEPENDENCY
|
|
go.etcd.io/etcd/pkg/v3 => ./FORBIDDEN_DEPENDENCY
|
|
go.etcd.io/etcd/tests/v3 => ./FORBIDDEN_DEPENDENCY
|
|
go.etcd.io/etcd/v3 => ./FORBIDDEN_DEPENDENCY
|
|
)
|