Skip to content

Commit dcc7ea8

Browse files
vitalii-codefreshvitalii-codefresh
authored
chore(CR-26970): upd go-git/v5 (#767)
## What CVE-2025-21613, CVE-2025-21614 fixed by updating github.com/go-git/go-git/v5 ## Why <!-- Why are these changes being made? --> ## Notes <!-- Add any additional notes here -->
1 parent 1f719a0 commit dcc7ea8

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

66 files changed

+95
-96
lines changed

‎Makefile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
VERSION=v0.1.69
1+
VERSION=v0.1.70
22

33
OUT_DIR=dist
44
YEAR?=$(shell date +"%Y")

‎cmd/commands/cluster.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/cluster_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/common.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/completion.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/component.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/config.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/config_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/git-source.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/helm.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/helm_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/integrations.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/migrate.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/pipeline.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/product-release.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/product-release_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/root.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/runtime.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/runtime_install.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.
@@ -168,7 +168,7 @@ func NewRuntimeInstallCommand() *cobra.Command {
168168
)
169169

170170
cmd := &cobra.Command{
171-
Use: "install [runtime_name]",
171+
Use: "install [runtime_name]",
172172
Deprecated: "We have transitioned our GitOps Runtimes from CLI-based to Helm-based installation.",
173173
RunE: func(cmd *cobra.Command, _ []string) error {
174174
return errors.New(`We have transitioned our GitOps Runtimes from CLI-based to Helm-based installation.

‎cmd/commands/upgrade.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/version.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/commands/workflow.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎cmd/main.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
// Copyright 2024 The Codefresh Authors.
1+
// Copyright 2025 The Codefresh Authors.
22
//
33
// Licensed under the Apache License, Version 2.0 (the "License");
44
// you may not use this file except in compliance with the License.

‎go.mod

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,8 @@ require (
1414
github.com/codefresh-io/go-sdk v1.3.1
1515
github.com/fatih/color v1.16.0
1616
github.com/ghodss/yaml v1.0.1-0.20190212211648-25d852aebe32
17-
github.com/go-git/go-billy/v5 v5.5.0
18-
github.com/go-git/go-git/v5 v5.12.0
17+
github.com/go-git/go-billy/v5 v5.6.1
18+
github.com/go-git/go-git/v5 v5.13.1
1919
github.com/gobuffalo/packr v1.30.1
2020
github.com/golang/mock v1.6.0
2121
github.com/google/uuid v1.6.0
@@ -31,7 +31,7 @@ require (
3131
github.com/spf13/pflag v1.0.5
3232
github.com/spf13/viper v1.19.0
3333
github.com/stretchr/testify v1.10.0
34-
golang.org/x/exp v0.0.0-20240416160154-fe59bbe5cc7f
34+
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
3535
golang.org/x/text v0.21.0
3636
gopkg.in/segmentio/analytics-go.v3 v3.1.0
3737
helm.sh/helm/v3 v3.14.2
@@ -57,7 +57,7 @@ require (
5757
github.com/Masterminds/squirrel v1.5.4 // indirect
5858
github.com/Microsoft/go-winio v0.6.2 // indirect
5959
github.com/PagerDuty/go-pagerduty v1.7.0 // indirect
60-
github.com/ProtonMail/go-crypto v1.0.0 // indirect
60+
github.com/ProtonMail/go-crypto v1.1.3 // indirect
6161
github.com/RocketChat/Rocket.Chat.Go.SDK v0.0.0-20210112200207-10ab4d695d60 // indirect
6262
github.com/TomOnTime/utfutil v0.0.0-20180511104225-09c41003ee1d // indirect
6363
github.com/alicebob/gopher-json v0.0.0-20200520072559-a9ecdc9d1d3a // indirect
@@ -101,7 +101,7 @@ require (
101101
github.com/containerd/platforms v0.2.1 // indirect
102102
github.com/coreos/go-oidc/v3 v3.11.0 // indirect
103103
github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect
104-
github.com/cyphar/filepath-securejoin v0.3.2 // indirect
104+
github.com/cyphar/filepath-securejoin v0.3.6 // indirect
105105
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
106106
github.com/davidmz/go-pageant v1.0.2 // indirect
107107
github.com/desertbit/timer v0.0.0-20180107155436-c41aec40b27f // indirect
@@ -254,7 +254,7 @@ require (
254254
github.com/segmentio/backo-go v1.1.0 // indirect
255255
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
256256
github.com/shopspring/decimal v1.4.0 // indirect
257-
github.com/skeema/knownhosts v1.2.2 // indirect
257+
github.com/skeema/knownhosts v1.3.0 // indirect
258258
github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
259259
github.com/slack-go/slack v0.13.0 // indirect
260260
github.com/soheilhy/cmux v0.1.5 // indirect
@@ -287,7 +287,7 @@ require (
287287
go.uber.org/automaxprocs v1.5.3 // indirect
288288
go.uber.org/multierr v1.11.0 // indirect
289289
golang.org/x/crypto v0.31.0 // indirect
290-
golang.org/x/mod v0.17.0 // indirect
290+
golang.org/x/mod v0.19.0 // indirect
291291
golang.org/x/net v0.33.0 // indirect
292292
golang.org/x/oauth2 v0.23.0 // indirect
293293
golang.org/x/sync v0.10.0 // indirect

0 commit comments

Comments
 (0)