upgrade go-oidc to fix GO-2024-2631 (#19884)

This commit is contained in:
Harshavardhana
2024-06-05 15:00:34 -07:00
committed by GitHub
parent d326ba52e9
commit 2107722829
4 changed files with 217 additions and 428 deletions

5
go.mod
View File

@@ -15,7 +15,7 @@ require (
github.com/cespare/xxhash/v2 v2.3.0
github.com/cheggaaa/pb v1.0.29
github.com/coredns/coredns v1.11.3
github.com/coreos/go-oidc v2.2.1+incompatible
github.com/coreos/go-oidc/v3 v3.10.0
github.com/coreos/go-systemd/v22 v22.5.0
github.com/cosnicolaou/pbzip2 v1.0.3
github.com/dchest/siphash v1.2.3
@@ -144,6 +144,7 @@ require (
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/frankban/quicktest v1.14.4 // indirect
github.com/go-asn1-ber/asn1-ber v1.5.7 // indirect
github.com/go-jose/go-jose/v4 v4.0.1 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/go-ole/go-ole v1.3.0 // indirect
@@ -223,7 +224,6 @@ require (
github.com/pierrec/lz4/v4 v4.1.21 // indirect
github.com/posener/complete v1.2.3 // indirect
github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
github.com/pquerna/cachecontrol v0.2.0 // indirect
github.com/prometheus/prom2json v1.3.3 // indirect
github.com/rivo/uniseg v0.4.7 // indirect
github.com/rjeczalik/notify v0.9.3 // indirect
@@ -259,5 +259,4 @@ require (
google.golang.org/grpc v1.64.0 // indirect
google.golang.org/protobuf v1.34.1 // indirect
gopkg.in/ini.v1 v1.67.0 // indirect
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
)