Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update module github.com/dgrijalva/jwt-go to v4 - abandoned #34

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github.aaakk.us.kg[bot]
Copy link

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot commented Feb 5, 2022

This PR contains the following updates:

Package Type Update Change
github.com/dgrijalva/jwt-go require major v3.2.0+incompatible -> v4.0.0-preview1

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2020-26160 #4

  • If you want to rebase/retry this PR, click this checkbox. ⚠ Warning: custom changes will be lost.

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot added the security fix Security fix generated by WhiteSource label Feb 5, 2022
@mend-for-github.aaakk.us.kg
Copy link
Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d ./...
go: downloading github.com/go-openapi/strfmt v0.0.0-20180910212104-776114108ccc
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/dchest/uniuri v0.0.0-20160212164326-8902c56451e9
go: downloading github.com/spf13/cast v1.3.0
go: downloading github.com/go-openapi/loads v0.0.0-20180825180312-fd899182a268
go: downloading github.com/jessevdk/go-flags v1.4.0
go: downloading github.com/avast/retry-go v2.2.0+incompatible
go: downloading github.com/jinzhu/gorm v0.0.0-20180909231100-123d4f50ef8a
go: downloading github.com/sirupsen/logrus v1.2.0
go: downloading github.com/zhouzhuojie/conditions v0.0.0-20190705160302-784df330cb87
go: downloading cloud.google.com/go v0.37.4
go: downloading github.com/Shopify/sarama v1.19.0
go: downloading github.com/a8m/kinesis-producer v0.0.0-20180723062609-03228a9f79b3
go: downloading github.com/aws/aws-sdk-go v1.15.32
go: downloading github.com/brandur/simplebox v0.0.0-20150921201729-84e9865bb03a
go: downloading github.com/bsm/ratelimit v2.0.0+incompatible
go: downloading github.com/go-openapi/runtime v0.0.0-20180910204625-41cb9a631c39
go: downloading github.com/zhouzhuojie/withtimeout v0.0.0-20190405051827-12b39eb2edd5
go: downloading google.golang.org/api v0.3.1
go: downloading github.com/go-openapi/errors v0.0.0-20180827163446-87bb65328877
go: downloading github.com/go-openapi/spec v0.0.0-20180825180323-f1468acb3b29
go: downloading github.com/go-openapi/swag v0.0.0-20180908172849-dd0dad036e67
go: downloading golang.org/x/net v0.0.0-20190313220215-9f648a60d977
go: downloading github.com/go-openapi/validate v0.0.0-20180825180342-e0648ff40507
go: downloading github.com/DataDog/datadog-go v0.0.0-20180330214955-e67964b4021a
go: downloading github.com/auth0/go-jwt-middleware v0.0.0-20170425171159-5493cabe49f7
go: downloading github.com/caarlos0/env v3.3.0+incompatible
go: downloading github.com/evalphobia/logrus_sentry v0.4.6
go: downloading github.com/getsentry/raven-go v0.0.0-20180903072508-084a9de9eb03
go: downloading github.com/gohttp/pprof v0.0.0-20141119085724-c9d246cbb3ba
go: downloading github.com/meatballhat/negroni-logrus v0.0.0-20170801195057-31067281800f
go: downloading github.com/newrelic/go-agent v2.1.0+incompatible
go: downloading github.com/phyber/negroni-gzip v0.0.0-20180113114010-ef6356a5d029
go: downloading github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829
go: downloading github.com/rs/cors v1.5.0
go: downloading github.com/urfave/negroni v0.3.0
go: downloading github.com/yadvendar/negroni-newrelic-go-agent v0.0.0-20160803090806-3dc58758cb67
go: downloading gopkg.in/DataDog/dd-trace-go.v1 v1.9.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20180315120708-ccb8e960c48f
go: downloading github.com/globalsign/mgo v0.0.0-20180905125535-1ca0a4f7cbcb
go: downloading github.com/mailru/easyjson v0.0.0-20180823135443-60711f1a8329
go: downloading github.com/mitchellh/mapstructure v1.1.2
go: downloading github.com/go-sql-driver/mysql v1.4.0
go: downloading github.com/lib/pq v1.0.0
go: downloading github.com/mattn/go-sqlite3 v1.9.0
go: downloading github.com/jinzhu/inflection v0.0.0-20180308033659-04140366298a
go: downloading github.com/konsorten/go-windows-terminal-sequences v1.0.1
go: downloading golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c
go: downloading github.com/golang/protobuf v1.2.0
go: downloading github.com/jpillora/backoff v0.0.0-20170918002102-8eab2debe79d
go: downloading github.com/go-openapi/analysis v0.0.0-20180801175213-7c1bef8f6d9f
go: downloading github.com/eapache/go-resiliency v1.1.0
go: downloading github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21
go: downloading github.com/eapache/queue v1.1.0
go: downloading github.com/pierrec/lz4 v2.0.5+incompatible
go: downloading github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a
go: downloading github.com/googleapis/gax-go/v2 v2.0.4
go: downloading go.opencensus.io v0.20.1
go: downloading golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6
go: downloading google.golang.org/genproto v0.0.0-20190404172233-64821d5d2107
go: downloading google.golang.org/grpc v1.19.0
go: downloading github.com/go-ini/ini v1.38.2
go: downloading github.com/docker/go-units v0.3.3
go: downloading gopkg.in/yaml.v2 v2.2.2
go: downloading github.com/go-openapi/jsonpointer v0.0.0-20180322222829-3a0015ad55fa
go: downloading github.com/go-openapi/jsonreference v0.0.0-20180322222742-3fb327e6747d
go: downloading github.com/pkg/errors v0.8.0
go: downloading github.com/certifi/gocertifi v0.0.0-20180118203423-deb3ae2ef261
go: downloading github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973
go: downloading github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90
go: downloading github.com/prometheus/common v0.2.0
go: downloading github.com/prometheus/procfs v0.0.0-20190219184716-e4d4a2206da0
go: downloading google.golang.org/appengine v1.4.0
go: downloading github.com/tinylib/msgp v1.1.0
go: downloading golang.org/x/sys v0.0.0-20190312061237-fead79001313
go: downloading github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db
go: downloading golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421
go: downloading github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8
go: downloading github.com/PuerkitoBio/purell v1.1.0
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.1
go: downloading github.com/philhofer/fwd v1.0.0
go: downloading github.com/hashicorp/golang-lru v0.5.0
go: downloading golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2
go: downloading github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578
go: downloading github.com/dgrijalva/jwt-go v3.2.0+incompatible
github.com/checkr/flagr/pkg/handler imports
	cloud.google.com/go/pubsub imports
	google.golang.org/genproto/googleapis/pubsub/v1: google.golang.org/[email protected]: stream error: stream ID 499; INTERNAL_ERROR; received from peer
github.com/checkr/flagr/pkg/handler imports
	cloud.google.com/go/pubsub imports
	google.golang.org/genproto/protobuf/field_mask: google.golang.org/[email protected]: stream error: stream ID 499; INTERNAL_ERROR; received from peer
github.com/checkr/flagr/pkg/handler imports
	cloud.google.com/go/pubsub imports
	cloud.google.com/go/iam imports
	google.golang.org/genproto/googleapis/iam/v1: google.golang.org/[email protected]: stream error: stream ID 499; INTERNAL_ERROR; received from peer
github.com/checkr/flagr/pkg/handler imports
	cloud.google.com/go/pubsub imports
	google.golang.org/grpc/status imports
	google.golang.org/genproto/googleapis/rpc/status: google.golang.org/[email protected]: stream error: stream ID 499; INTERNAL_ERROR; received from peer

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot force-pushed the whitesource-remediate/github.aaakk.us.kg-dgrijalva-jwt-go-4.x branch from 60d64eb to 8357541 Compare February 22, 2022 04:11
@mend-for-github.aaakk.us.kg
Copy link
Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot changed the title Update module github.com/dgrijalva/jwt-go to v4 Update module github.com/dgrijalva/jwt-go to v4 - abandoned Jan 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants