lunny/git-lfs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6f1828ebec
git-lfs/go.sum

133 lines
12 KiB
Plaintext
Raw Normal View History

Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/alexbrainman/sspi v0.0.0-20210105120005-909beea2cc74 h1:Kk6a4nehpJ3UuJRqlA3JxYxBZEqCeOmATOvrbT4p9RA=
github.com/alexbrainman/sspi v0.0.0-20210105120005-909beea2cc74/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=
Implement retry logic to fix LFS storage race conditions on Windows Testing showed that while race condition analysis in #3880 was correct, the way it tries to fix that does not work for the *first* git-lfs process that will actually perform file move. Instead, this commit performs multiple attempts when working with files in LFS storage. Similar logic is already implemented in "cmd/go/internal/robustio" and "cmd/go/internal/renameio" packages. However, they are not public, so we cannot use them.
2019-10-29 11:26:39 +00:00
github.com/avast/retry-go v2.4.2+incompatible h1:+ZjCypQT/CyP0kyJO2EcU4d/ZEJWSbP8NENI578cPmA=
github.com/avast/retry-go v2.4.2+incompatible/go.mod h1:XtSnn+n/sHqQIpZ10K1qAevBhOOCWBLXXy3hyiqqBrY=
Initial addition of shell completion script generator
2023-03-14 16:45:03 +00:00
github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
Update stretchr/testify to v1.5.1 This adds new assertion methods used in future tests.
2020-04-14 21:55:21 +00:00
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
go.mod: update gitobj to the latest master In a future commit, we'll use the latest gitobj's untyped Object function and storage functionality. Update the repository to the latest master and vendor the dependencies.
2018-08-31 19:29:33 +00:00
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/dpotapov/go-spnego v0.0.0-20210315154721-298b63a54430 h1:oempk9HjNt6rVKyKmpdnoN7XABQv3SXLWu3pxUI7Vlk=
github.com/dpotapov/go-spnego v0.0.0-20210315154721-298b63a54430/go.mod h1:AVSs/gZKt1bOd2AhkhbS7Qh56Hv7klde22yXVbwYJhc=
go.mod: bump gitobj to v2.1.1 Bump gitobj to a version which addresses a misparsing in commit headers.
2022-09-29 17:57:43 +00:00
github.com/git-lfs/gitobj/v2 v2.1.1 h1:tf/VU6zL1kxa3he+nf6FO/syX+LGkm6WGDsMpfuXV7Q=
github.com/git-lfs/gitobj/v2 v2.1.1/go.mod h1:q6aqxl6Uu3gWsip5GEKpw+7459F97er8COmU45ncAxw=
netrc: consider same machine may have different login names
2021-11-04 09:31:37 +00:00
github.com/git-lfs/go-netrc v0.0.0-20210914205454-f0c862dd687a h1:6pskVZacdMUL93pCpMAYnMDLjH1yDFhssPYGe32sjdk=
github.com/git-lfs/go-netrc v0.0.0-20210914205454-f0c862dd687a/go.mod h1:70O4NAtvWn1jW8V8V+OKrJJYcxDLTmIozfi2fmSz5SI=
git: use pktline repository We have a pktline repository that provides our pkt-line code from Git LFS, but separated out into a separate, reusable repository. The current code is private to the git package, and since we'll want to use it in the future from multiple packages, it makes sense to just use the separate repository, which we want to do anyway. Let's include the repository in our go.mod and vendor the modules. Remove the old code and replace its use with the new code.
2021-02-08 21:25:03 +00:00
github.com/git-lfs/pktline v0.0.0-20210330133718-06e9096e2825 h1:riQhgheTL7tMF4d5raz9t3+IzoR1i1wqxE1kZC6dY+U=
github.com/git-lfs/pktline v0.0.0-20210330133718-06e9096e2825/go.mod h1:fenKRzpXDjNpsIBhuhUzvjCKlDjKam0boRAenTE0Q6A=
Bump wildmatch to v2.0.1 Now that we have a fully Git-compatible wildmatch, let's use it in Git LFS. Vendor the module appropriately.
2021-08-23 15:52:52 +00:00
github.com/git-lfs/wildmatch/v2 v2.0.1 h1:Ds+aobrV5bK0wStILUOn9irllPyf9qrFETbKzwzoER8=
github.com/git-lfs/wildmatch/v2 v2.0.1/go.mod h1:EVqonpk9mXbREP3N8UkwoWdrF249uHpCUo5CPXY81gw=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/gorilla/securecookie v1.1.1 h1:miw7JPhV+b/lAHSXz4qd/nN9jRiAFV5FwjeKyCS8BvQ=
github.com/gorilla/securecookie v1.1.1/go.mod h1:ra0sb63/xPlUeL+yeDciTfxMRAA+MP+HVt/4epWDjd4=
github.com/gorilla/sessions v1.2.1 h1:DHd3rPN5lE3Ts3D8rKkQ8x/0kqfeNmBAaiSi+o7FsgI=
github.com/gorilla/sessions v1.2.1/go.mod h1:dk2InVEVJ0sfLlnXv9EAgkf6ecYs/i80K/zI+bUmuGM=
github.com/hashicorp/go-uuid v1.0.2 h1:cfejS+Tpcp13yd5nYHWDI6qVCny6wyX2Mt5SGur2IGE=
github.com/hashicorp/go-uuid v1.0.2/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
Update cobra to 1.7.0
2023-07-31 03:58:16 +00:00
github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/jcmturner/aescts/v2 v2.0.0 h1:9YKLH6ey7H4eDBXW8khjYslgyqG2xZikXP0EQFKrle8=
github.com/jcmturner/aescts/v2 v2.0.0/go.mod h1:AiaICIRyfYg35RUkr8yESTqvSy7csK90qZ5xfvvsoNs=
github.com/jcmturner/dnsutils/v2 v2.0.0 h1:lltnkeZGL0wILNvrNiVCR6Ro5PGU/SeBvVO/8c/iPbo=
github.com/jcmturner/dnsutils/v2 v2.0.0/go.mod h1:b0TnjGOvI/n42bZa+hmXL+kFJZsFT7G4t3HTlQ184QM=
go.mod: add SPNEGO modules We'll need some additional dependencies to add support for Kerberos to Git LFS. In order to support HTTP SPNEGO (Negotiate) support, add the required modules and vendor their dependencies.
2019-11-28 19:40:36 +00:00
github.com/jcmturner/gofork v1.0.0 h1:J7uCkflzTEhUZ64xqKnkDxq3kzc96ajM1Gli5ktUem8=
github.com/jcmturner/gofork v1.0.0/go.mod h1:MK8+TM0La+2rjBD4jE12Kj1pCCxK7d2LK/UM3ncEo0o=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/jcmturner/goidentity/v6 v6.0.1 h1:VKnZd2oEIMorCTsFBnJWbExfNN7yZr3EhJAxwOkZg6o=
github.com/jcmturner/goidentity/v6 v6.0.1/go.mod h1:X1YW3bgtvwAXju7V3LCIMpY0Gbxyjn/mY9zx4tFonSg=
github.com/jcmturner/gokrb5/v8 v8.4.2 h1:6ZIM6b/JJN0X8UM43ZOM6Z4SJzla+a/u7scXFJzodkA=
github.com/jcmturner/gokrb5/v8 v8.4.2/go.mod h1:sb+Xq/fTY5yktf/VxLsE3wlfPqQjp0aWNYyvBVK62bc=
github.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZY=
github.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=
go.*,lfs: mock time in copy callback log file test In commit 00f1e9521ab5d39aab393796745189d39c27b9a0 of PR #5504 we added the TestCopyCallbackFileThrottle() test function to confirm that the CopyCallbackFile() method of GitFilter structure in the "lfs" package now throttled its output of progress messages into a log file so that, in general, no more than one message was written during the interval defined by the tasklog.DefaultLoggingThrottle value. This new throttling behaviour was added in commit 5bfa9009dafce59789b88b1a0854691b596f6e76 in the same PR. The TestCopyCallbackFileThrottle() function attempts to validate the throttling action by reading a test buffer in segments and waiting or not waiting between each read, expecting the log messages to be written or not written, as appropriate. However, because our CI test suite may experience slow execution times as a result of running in virtualized environments, reads may occur at times more than the tasklog.DefaultLoggingThrottle interval apart even without the artifical waits injected by the test function, causing the test to fail when it sees more log messages than it expects. We can avoid this problem by making the wait intervals in the test deterministic using a mocked value for the current time. We use the github.com/jmhodges/clock package for this purpose, adding an object of its Clock interface type to the GitFilter structure. In all non-test code this object is simply a wrapper for the "time" package's functions, but in our test we can use a variant which allows us to control the time values returned to the CopyCallbackFile() method, either stepping forward or not, as we desire.
2023-09-28 06:13:30 +00:00
github.com/jmhodges/clock v1.2.0 h1:eq4kys+NI0PLngzaHEe7AmPT90XMGIEySD1JfV1PDIs=
github.com/jmhodges/clock v1.2.0/go.mod h1:qKjhA7x7u/lQpPB1XAqX1b1lCI/w3/fNuYpI/ZjLynI=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
github.com/leonelquinteros/gotext v1.5.0 h1:ODY7LzLpZWWSJdAHnzhreOr6cwLXTAmc914FOauSkBM=
github.com/leonelquinteros/gotext v1.5.0/go.mod h1:OCiUVHuhP9LGFBQ1oAmdtNCHJCiHiQA8lf4nAifHkr0=
tasklog: don't log progress status when stdout is not a tty But make it overridable by either - setting lfs.forceprogress 1 - setting GIT_LFS_FORCE_PROGRESS=1
2018-10-30 08:06:55 +00:00
github.com/mattn/go-isatty v0.0.4 h1:bnP0vzxcAdeI1zdubAl5PjU6zsERjGZb7raWodagDYs=
github.com/mattn/go-isatty v0.0.4/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/olekukonko/ts v0.0.0-20171002115256-78ecb04241c0 h1:LiZB1h0GIcudcDci2bxbqI6DXV8bF8POAnArqvRrIyw=
go.mod: use latest github.com/olekukonko/ts We use package github.com/olekukonko/ts to issue IOCTL's to gather the terminal size of the calling terminal in order to determine the length of lines we attempt to print. Until now, we have used revision ecf753e7c962, which is over 4 years old. Since then, github.com/olekukonko/ts has introduced support for Solaris, which we previously could not build or run on because package syscall on Solaris does not export an IOCTL constant. Let's upgrade to the latest version, and bring in support for Solaris.
2018-09-03 13:27:17 +00:00
github.com/olekukonko/ts v0.0.0-20171002115256-78ecb04241c0/go.mod h1:F/7q8/HZz+TXjlsoZQQKVYvXTZaFH4QRa3y+j1p7MS0=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/pkg/errors v0.0.0-20170505043639-c605e284fe17 h1:chPfVn+gpAM5CTpTyVU9j8J+xgRGwmoDlNDLjKnJiYo=
all: use Go Modules instead of Glide Since we are now building on Go 1.11 (as of 074a2d4f (all: use Go 1.11 in CI, 2018-08-28)) and Go 1.11 supports Go Modules [1], let's stop using Glide, and begin using Go Modules. This involves a few things: * Teach the Makefile how to build go.sum files instead of glide.lock files. * Teach continuous integration services to build Git LFS in a non-$GOPATH environment, since (without setting GO111MODULE=on explicitly, which we choose not to do), this will break compiling Git LFS, because Go 1.11 will ignore modules present in a Go checkout beneath $GOPATH. * In order to do the above, let's also make sure that we are un-setting $GOCACHE in the environment, as this causes Go to work without modules support [2]. * Because we're no longer building in a `$GOPATH`-based location, let's instruct the CircleCI base image to archive the new location, too. * Similarly, teach the RPM spec to build in a non-$GOPATH location. * By contrast, since we use dh_golang to build git-lfs binaries on Debian, let's wait until the upstream dh_golang package is released with support for Go 1.11 module support explicitly. Therefore, force GO111MODULE to be on so that we can build a copy of Git LFS whose checkout is within a $GOPATH. Although the go.mod versions match the glide.yaml ones, the diff attached is large because Go Modules do not vendor `_test.go` files, whereas Glide does. [1]: https://golang.org/doc/go1.11#modules [2]: `GOCACHE=on` will be deprecated in Go 1.12, so this change makes sense for that reason, too. Co-authored-by: brian m. carlson <bk2204@github.com>
2018-08-28 20:53:57 +00:00
github.com/pkg/errors v0.0.0-20170505043639-c605e284fe17/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
go.mod: update gitobj to the latest master In a future commit, we'll use the latest gitobj's untyped Object function and storage functionality. Update the repository to the latest master and vendor the dependencies.
2018-08-31 19:29:33 +00:00
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/rubyist/tracerx v0.0.0-20170927163412-787959303086 h1:mncRSDOqYCng7jOD+Y6+IivdRI6Kzv2BLWYkWkdQfu0=
all: use Go Modules instead of Glide Since we are now building on Go 1.11 (as of 074a2d4f (all: use Go 1.11 in CI, 2018-08-28)) and Go 1.11 supports Go Modules [1], let's stop using Glide, and begin using Go Modules. This involves a few things: * Teach the Makefile how to build go.sum files instead of glide.lock files. * Teach continuous integration services to build Git LFS in a non-$GOPATH environment, since (without setting GO111MODULE=on explicitly, which we choose not to do), this will break compiling Git LFS, because Go 1.11 will ignore modules present in a Go checkout beneath $GOPATH. * In order to do the above, let's also make sure that we are un-setting $GOCACHE in the environment, as this causes Go to work without modules support [2]. * Because we're no longer building in a `$GOPATH`-based location, let's instruct the CircleCI base image to archive the new location, too. * Similarly, teach the RPM spec to build in a non-$GOPATH location. * By contrast, since we use dh_golang to build git-lfs binaries on Debian, let's wait until the upstream dh_golang package is released with support for Go 1.11 module support explicitly. Therefore, force GO111MODULE to be on so that we can build a copy of Git LFS whose checkout is within a $GOPATH. Although the go.mod versions match the glide.yaml ones, the diff attached is large because Go Modules do not vendor `_test.go` files, whereas Glide does. [1]: https://golang.org/doc/go1.11#modules [2]: `GOCACHE=on` will be deprecated in Go 1.12, so this change makes sense for that reason, too. Co-authored-by: brian m. carlson <bk2204@github.com>
2018-08-28 20:53:57 +00:00
github.com/rubyist/tracerx v0.0.0-20170927163412-787959303086/go.mod h1:YpdgDXpumPB/+EGmGTYHeiW/0QVFRzBYTNFaxWfPDk4=
Initial addition of shell completion script generator
2023-03-14 16:45:03 +00:00
github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
Update cobra to 1.7.0
2023-07-31 03:58:16 +00:00
github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I=
github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0=
Initial addition of shell completion script generator
2023-03-14 16:45:03 +00:00
github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
Use different parser for cookiejar files The original parser that was used in #3825 brings in a lot of dependencies that complicate packaging git-lfs. This replaces it with a small parser I wrote with almost no dependencies. I've tested this as extensively as i can and it seems to work correctly.
2019-10-27 21:48:15 +00:00
github.com/ssgelm/cookiejarparser v1.0.1 h1:cRdXauUbOTFzTPJFaeiWbHnQ+tRGlpKKzvIK9PUekE4=
github.com/ssgelm/cookiejarparser v1.0.1/go.mod h1:DUfC0mpjIzlDN7DzKjXpHj0qMI5m9VrZuz3wSlI+OEI=
Update stretchr/testify to v1.5.1 This adds new assertion methods used in future tests.
2020-04-14 21:55:21 +00:00
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
go.mod: update gitobj to the latest master In a future commit, we'll use the latest gitobj's untyped Object function and storage functionality. Update the repository to the latest master and vendor the dependencies.
2018-08-31 19:29:33 +00:00
github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f h1:J9EGpcZtP0E/raorCMxlFGSTBrsSlaDGf3jU/qvAE2c=
all: use Go Modules instead of Glide Since we are now building on Go 1.11 (as of 074a2d4f (all: use Go 1.11 in CI, 2018-08-28)) and Go 1.11 supports Go Modules [1], let's stop using Glide, and begin using Go Modules. This involves a few things: * Teach the Makefile how to build go.sum files instead of glide.lock files. * Teach continuous integration services to build Git LFS in a non-$GOPATH environment, since (without setting GO111MODULE=on explicitly, which we choose not to do), this will break compiling Git LFS, because Go 1.11 will ignore modules present in a Go checkout beneath $GOPATH. * In order to do the above, let's also make sure that we are un-setting $GOCACHE in the environment, as this causes Go to work without modules support [2]. * Because we're no longer building in a `$GOPATH`-based location, let's instruct the CircleCI base image to archive the new location, too. * Similarly, teach the RPM spec to build in a non-$GOPATH location. * By contrast, since we use dh_golang to build git-lfs binaries on Debian, let's wait until the upstream dh_golang package is released with support for Go 1.11 module support explicitly. Therefore, force GO111MODULE to be on so that we can build a copy of Git LFS whose checkout is within a $GOPATH. Although the go.mod versions match the glide.yaml ones, the diff attached is large because Go Modules do not vendor `_test.go` files, whereas Glide does. [1]: https://golang.org/doc/go1.11#modules [2]: `GOCACHE=on` will be deprecated in Go 1.12, so this change makes sense for that reason, too. Co-authored-by: brian m. carlson <bk2204@github.com>
2018-08-28 20:53:57 +00:00
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0=
all: use Go Modules instead of Glide Since we are now building on Go 1.11 (as of 074a2d4f (all: use Go 1.11 in CI, 2018-08-28)) and Go 1.11 supports Go Modules [1], let's stop using Glide, and begin using Go Modules. This involves a few things: * Teach the Makefile how to build go.sum files instead of glide.lock files. * Teach continuous integration services to build Git LFS in a non-$GOPATH environment, since (without setting GO111MODULE=on explicitly, which we choose not to do), this will break compiling Git LFS, because Go 1.11 will ignore modules present in a Go checkout beneath $GOPATH. * In order to do the above, let's also make sure that we are un-setting $GOCACHE in the environment, as this causes Go to work without modules support [2]. * Because we're no longer building in a `$GOPATH`-based location, let's instruct the CircleCI base image to archive the new location, too. * Similarly, teach the RPM spec to build in a non-$GOPATH location. * By contrast, since we use dh_golang to build git-lfs binaries on Debian, let's wait until the upstream dh_golang package is released with support for Go 1.11 module support explicitly. Therefore, force GO111MODULE to be on so that we can build a copy of Git LFS whose checkout is within a $GOPATH. Although the go.mod versions match the glide.yaml ones, the diff attached is large because Go Modules do not vendor `_test.go` files, whereas Glide does. [1]: https://golang.org/doc/go1.11#modules [2]: `GOCACHE=on` will be deprecated in Go 1.12, so this change makes sense for that reason, too. Co-authored-by: brian m. carlson <bk2204@github.com>
2018-08-28 20:53:57 +00:00
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
go.sum: add missing entries Each module in go.sum should have two entries, one for the module itself and one for the go.mod file. Ensure both of these are included.
2018-10-16 18:58:20 +00:00
github.com/xeipuuv/gojsonschema v0.0.0-20170210233622-6b67b3fab74d h1:BJPiQVOMMtJsJIkrF4T6K3RKbzqr7rkaybMk33dlGUo=
all: use Go Modules instead of Glide Since we are now building on Go 1.11 (as of 074a2d4f (all: use Go 1.11 in CI, 2018-08-28)) and Go 1.11 supports Go Modules [1], let's stop using Glide, and begin using Go Modules. This involves a few things: * Teach the Makefile how to build go.sum files instead of glide.lock files. * Teach continuous integration services to build Git LFS in a non-$GOPATH environment, since (without setting GO111MODULE=on explicitly, which we choose not to do), this will break compiling Git LFS, because Go 1.11 will ignore modules present in a Go checkout beneath $GOPATH. * In order to do the above, let's also make sure that we are un-setting $GOCACHE in the environment, as this causes Go to work without modules support [2]. * Because we're no longer building in a `$GOPATH`-based location, let's instruct the CircleCI base image to archive the new location, too. * Similarly, teach the RPM spec to build in a non-$GOPATH location. * By contrast, since we use dh_golang to build git-lfs binaries on Debian, let's wait until the upstream dh_golang package is released with support for Go 1.11 module support explicitly. Therefore, force GO111MODULE to be on so that we can build a copy of Git LFS whose checkout is within a $GOPATH. Although the go.mod versions match the glide.yaml ones, the diff attached is large because Go Modules do not vendor `_test.go` files, whereas Glide does. [1]: https://golang.org/doc/go1.11#modules [2]: `GOCACHE=on` will be deprecated in Go 1.12, so this change makes sense for that reason, too. Co-authored-by: brian m. carlson <bk2204@github.com>
2018-08-28 20:53:57 +00:00
github.com/xeipuuv/gojsonschema v0.0.0-20170210233622-6b67b3fab74d/go.mod h1:5yf86TLmAcydyeJq5YvxkGPE2fm/u4myDekKRoLuqhs=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
Vendor `golang.org/x/net` dependency Vendor the `golang.org/x/net` dependency. This will be used in a future commit to add HTTP/2 transport support. Note that due to the way go modules work, the `golang.org/x/sys` dependency was updated as well when running `make vendor`.
2019-08-21 22:01:53 +00:00
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
go.mod: update golang.org/x/ modules for Go 1.16 We require some newer versions to support Go 1.16, so let's bump the versions and vendor new copies of the libraries.
2021-03-12 14:51:07 +00:00
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
golang.org/x/crypto v0.0.0-20201112155050-0c6587e931a9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
go.mod: add SPNEGO modules We'll need some additional dependencies to add support for Kerberos to Git LFS. In order to support HTTP SPNEGO (Negotiate) support, add the required modules and vendor their dependencies.
2019-11-28 19:40:36 +00:00
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
Use different parser for cookiejar files The original parser that was used in #3825 brings in a lot of dependencies that complicate packaging git-lfs. This replaces it with a small parser I wrote with almost no dependencies. I've tested this as extensively as i can and it seems to work correctly.
2019-10-27 21:48:15 +00:00
golang.org/x/net v0.0.0-20191027093000-83d349e8ac1a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.1.0 h1:wsuoTGHzEhffawBOhz5CYhcrV4IdKZbEyZjBMuTp12o=
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
Vendor `golang.org/x/net` dependency Vendor the `golang.org/x/net` dependency. This will be used in a future commit to add HTTP/2 transport support. Note that due to the way go modules work, the `golang.org/x/sys` dependency was updated as well when running `make vendor`.
2019-08-21 22:01:53 +00:00
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
go.mod: add SPNEGO modules We'll need some additional dependencies to add support for Kerberos to Git LFS. In order to support HTTP SPNEGO (Negotiate) support, add the required modules and vendor their dependencies.
2019-11-28 19:40:36 +00:00
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
vendor,go.{mod,sum}: update x/net and dependencies Update the vendored golang.org/x/net module to the latest version, which in turn updates the vendored copy of the golang.org/x/text module to 0.3.3. That version of x/text includes a mitigation of CVE-2020-14040, which pertains to processing UTF-16 data with a Byte Order Mark. The Git LFS client should not be affected by that security issue, since it does not open streams in UTF-16 mode, but we update our modules to stay current with the upstream Go sources and also to avoid being flagged by security scanners. The specific commands run to perform this update were: "go get golang.org/x/net@latest && go mod tidy && go mod vendor"
2021-02-08 20:45:26 +00:00
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
vendor,go.*: update x/crypto and dependencies Update the vendored golang.org/x/crypto module to the latest version, which in turn updates the vendored copy of the x/sys module. While the portions of x/crypto vendored into this project do not actually change at all, updating the module's entry in vendor/modules.txt and go.{mod,sum} means we will not be flagged by security scanners regarding CVE-2020-29652 in the x/crypto/ssh library code. The Git LFS client should not be affected by that security issue, since we do not use the ssh component of the x/crypto module. The specific commands run to perform this update were: go get golang.org/x/crypto@latest && go mod tidy && go mod vendor
2021-11-15 22:30:01 +00:00
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.13.0 h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=
golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
vendor,go.{mod,sum}: update x/net and dependencies Update the vendored golang.org/x/net module to the latest version, which in turn updates the vendored copy of the golang.org/x/text module to 0.3.3. That version of x/text includes a mitigation of CVE-2020-14040, which pertains to processing UTF-16 data with a Byte Order Mark. The Git LFS client should not be affected by that security issue, since it does not open streams in UTF-16 mode, but we update our modules to stay current with the upstream Go sources and also to avoid being flagged by security scanners. The specific commands run to perform this update were: "go get golang.org/x/net@latest && go mod tidy && go mod vendor"
2021-02-08 20:45:26 +00:00
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
Vendor `golang.org/x/net` dependency Vendor the `golang.org/x/net` dependency. This will be used in a future commit to add HTTP/2 transport support. Note that due to the way go modules work, the `golang.org/x/sys` dependency was updated as well when running `make vendor`.
2019-08-21 22:01:53 +00:00
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
vendor,go.{mod,sum}: update x/net and dependencies Update the vendored golang.org/x/net module to the latest version, which in turn updates the vendored copy of the golang.org/x/text module to 0.3.3. That version of x/text includes a mitigation of CVE-2020-14040, which pertains to processing UTF-16 data with a Byte Order Mark. The Git LFS client should not be affected by that security issue, since it does not open streams in UTF-16 mode, but we update our modules to stay current with the upstream Go sources and also to avoid being flagged by security scanners. The specific commands run to perform this update were: "go get golang.org/x/net@latest && go mod tidy && go mod vendor"
2021-02-08 20:45:26 +00:00
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
vendor,go.*: update x/crypto and x/text modules Update the vendored golang.org/x/crypto and golang.org/x/text modules to the latest versions, which in turn updates the vendored copy of the golang.org/x/net and golang.org/x/sys modules. Updating these modules' entries in vendor/modules.txt and go.{mod,sum} means we will not be flagged by security scanners regarding either CVE-2021-38561 or CVE-2022-27191, neither of which should actually affect Git LFS. The Git LFS client should not be affected by CVE-2021-38561 as it pertains the Go x/text/language package and specifically the BCP 47 tag functions, which Git LFS does not use. The Git LFS client should not be affected by CVE-2022-27191 as it pertains to the Go x/crypto/ssh package and specifically a crash vulnerability in the SSH server functions, which Git LFS does not use. The specific commands run to perform this update were: go get golang.org/x/crypto@latest && go get golang.org/x/text@latest && go mod tidy && go mod vendor
2022-04-25 17:00:23 +00:00
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
golang.org/x/text v0.13.0 h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=
golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
vendor,go.{mod,sum}: update x/net and dependencies Update the vendored golang.org/x/net module to the latest version, which in turn updates the vendored copy of the golang.org/x/text module to 0.3.3. That version of x/text includes a mitigation of CVE-2020-14040, which pertains to processing UTF-16 data with a Byte Order Mark. The Git LFS client should not be affected by that security issue, since it does not open streams in UTF-16 mode, but we update our modules to stay current with the upstream Go sources and also to avoid being flagged by security scanners. The specific commands run to perform this update were: "go get golang.org/x/net@latest && go mod tidy && go mod vendor"
2021-02-08 20:45:26 +00:00
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/tools v0.0.0-20200221224223-e1da425f72fd/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
2023-10-11 23:22:57 +00:00
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
Update golang.org/x/text The version we're using is vulnerable to CVE-2022-32149. We don't use the vulnerable code, but upgrade the remaining golang.org/x packages we depend on, since the text package is merely a dependency of them. In doing so, we'll update the text package, and avoid triggering any warning from vulnerability scanners. In addition, now that we're using released versions, it will be easier to keep things up to date.
2023-02-21 20:22:49 +00:00
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
go.mod: add module for gotext We'd like to support localization in Git LFS. To do so, add the gotext package, which implement gettext-compatible localization.
2021-11-09 20:56:58 +00:00
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
go.mod: tidy Tidy go.mod and go.sum to reflect the latest updates.
2020-07-10 18:59:13 +00:00
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
Update stretchr/testify to v1.5.1 This adds new assertion methods used in future tests.
2020-04-14 21:55:21 +00:00
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
Bump go-spnego to the latest version This version uses a newer version of the Kerberos library, which should work better in some environments. Tidy the go.mod and go.sum files and vendor the dependencies.
2021-04-14 14:45:24 +00:00
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
go.mod: require gopkg.in/yaml.v3 v3.0.1 Versions before v3.0.0, including the version from 2020 we're using, lack the patches in v3.0.1 that fix a security issue. Update to v3.0.1 to improve the security situation here.
2022-06-01 16:06:37 +00:00
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
Reference in New Issue Copy Permalink