-
Notifications
You must be signed in to change notification settings - Fork 139
Bump github.com/openshift/backplane-cli from 0.11.0 to 0.11.1 #950
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -8,9 +8,9 @@ require ( | |
| github.com/Masterminds/semver/v3 v3.4.0 | ||
| github.com/PagerDuty/go-pagerduty v1.8.0 | ||
| github.com/andygrunwald/go-jira v1.17.0 | ||
| github.com/aws/aws-sdk-go-v2 v1.42.0 | ||
| github.com/aws/aws-sdk-go-v2/config v1.32.25 | ||
| github.com/aws/aws-sdk-go-v2/credentials v1.19.24 | ||
| github.com/aws/aws-sdk-go-v2 v1.43.4 | ||
| github.com/aws/aws-sdk-go-v2/config v1.32.35 | ||
| github.com/aws/aws-sdk-go-v2/credentials v1.19.34 | ||
| github.com/aws/aws-sdk-go-v2/service/cloudtrail v1.47.4 | ||
| github.com/aws/aws-sdk-go-v2/service/costexplorer v1.46.7 | ||
| github.com/aws/aws-sdk-go-v2/service/ec2 v1.279.2 | ||
|
|
@@ -22,8 +22,8 @@ require ( | |
| github.com/aws/aws-sdk-go-v2/service/route53 v1.48.7 | ||
| github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1 | ||
| github.com/aws/aws-sdk-go-v2/service/servicequotas v1.34.1 | ||
| github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 | ||
| github.com/aws/smithy-go v1.27.1 | ||
| github.com/aws/aws-sdk-go-v2/service/sts v1.45.4 | ||
| github.com/aws/smithy-go v1.27.6 | ||
| github.com/brianvoe/gofakeit/v6 v6.24.0 | ||
| github.com/cenkalti/backoff/v4 v4.3.0 | ||
| github.com/coreos/go-semver v0.3.1 | ||
|
|
@@ -43,11 +43,11 @@ require ( | |
| github.com/onsi/gomega v1.42.1 | ||
| github.com/openshift-online/ocm-cli v1.0.11 | ||
| github.com/openshift-online/ocm-common v0.0.37 | ||
| github.com/openshift-online/ocm-sdk-go v0.1.504 | ||
| github.com/openshift-online/ocm-sdk-go v0.1.507 | ||
| github.com/openshift/api v0.0.0-20250207102212-9e59a77ed2e0 | ||
| github.com/openshift/aws-account-operator/api v0.0.0-20250205151445-6455c35fc4ae | ||
| github.com/openshift/backplane-api v0.0.0-20260205054653-459856398d59 | ||
| github.com/openshift/backplane-cli v0.11.0 | ||
| github.com/openshift/backplane-cli v0.11.1 | ||
| github.com/openshift/cloud-credential-operator v0.0.0-20250120201329-db5f2531a5b4 | ||
| github.com/openshift/gcp-project-operator v0.0.0-20241024143818-ec4eabd35aba | ||
| github.com/openshift/hive/apis v0.0.0-20250206153200-5a34ea42e678 | ||
|
|
@@ -103,18 +103,18 @@ require ( | |
| github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect | ||
| github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect | ||
| github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect | ||
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 // indirect | ||
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.35 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.35 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.35 // indirect | ||
| github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.36 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.15 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.8 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.35 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.17 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/signin v1.2.0 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/ssm v1.69.3 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/signin v1.5.4 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/ssm v1.73.4 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/sso v1.33.4 // indirect | ||
| github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.4 // indirect | ||
|
Comment on lines
+106
to
+117
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/usr/bin/env bash
set -euo pipefail
eventstream_version="$(
go list -m -f '{{.Version}}' \
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
)"
echo "Resolved EventStream version: ${eventstream_version}"
minimum="$(printf '%s\n' v1.7.8 "$eventstream_version" | sort -V | head -n1)"
if [[ "$minimum" != "v1.7.8" ]]; then
echo "EventStream version is below the patched version" >&2
exit 1
fi
govulncheck -mode=mod ./...Repository: openshift/osdctl Length of output: 240 🏁 Script executed: #!/usr/bin/env bash
set -euo pipefail
printf '%s\n' '--- go.mod AWS EventStream references ---'
rg -n -C 2 'github\.com/aws/aws-sdk-go-v2(/aws/protocol/eventstream)?' go.mod go.sum || true
printf '%s\n' '--- all EventStream references in tracked files ---'
rg -n 'aws/protocol/eventstream|eventstream' --glob '!go.sum' --glob '!vendor/**' . | head -200 || true
printf '%s\n' '--- OSV advisory ---'
curl -fsSL 'https://api.osv.dev/v1/vulns/GO-2026-5764' |
python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps({"id":d.get("id"),"summary":d.get("summary"),"details":d.get("details"),"affected":d.get("affected"),"references":d.get("references")}, indent=2))'Repository: openshift/osdctl Length of output: 17445 Upgrade the AWS SDK dependencies
🤖 Prompt for AI AgentsSource: Path instructions |
||
| github.com/aymerick/douceur v0.2.0 // indirect | ||
| github.com/beorn7/perks v1.0.1 // indirect | ||
| github.com/blang/semver/v4 v4.0.0 // indirect | ||
|
|
@@ -203,8 +203,8 @@ require ( | |
| github.com/oapi-codegen/runtime v1.1.2 // indirect | ||
| github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037 // indirect | ||
| github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90 // indirect | ||
| github.com/openshift-online/ocm-api-model/clientapi v0.0.459 // indirect | ||
| github.com/openshift-online/ocm-api-model/model v0.0.459 // indirect | ||
| github.com/openshift-online/ocm-api-model/clientapi v0.0.461 // indirect | ||
| github.com/openshift-online/ocm-api-model/model v0.0.461 // indirect | ||
| github.com/openshift/custom-resource-status v1.1.3-0.20220503160415-f2fdb4999d87 // indirect | ||
| github.com/pelletier/go-toml/v2 v2.2.4 // indirect | ||
| github.com/perimeterx/marshmallow v1.1.5 // indirect | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔒 Security & Privacy | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
Repository: openshift/osdctl
Length of output: 154
🏁 Script executed:
Repository: openshift/osdctl
Length of output: 16784
🏁 Script executed:
Repository: openshift/osdctl
Length of output: 16760
🏁 Script executed:
Repository: openshift/osdctl
Length of output: 19296
🏁 Script executed:
Repository: openshift/osdctl
Length of output: 4983
Add SBOM, provenance, and Sigstore signing to releases.
Both release workflows run GoReleaser without SBOM generation, provenance attestations, or cosign signatures. Configure the release paths to provide these controls before publishing artifacts.
🤖 Prompt for AI Agents
Source: Path instructions