Commit Graph

207 Commits

Author SHA1 Message Date
Ashley Davis
8c182d73f1
fix GHSA-xr7q-jx4m-x55m
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2024-07-10 11:01:15 +01:00
Ashley Davis
817a2bfd21
bump go-retryablehttp to address CVE-2024-6104
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2024-06-25 11:15:52 +01:00
Tim Ramlot
a6f7d5defa
Bump the go_modules group across 2 directories with 1 update
Bumps the go_modules group with 1 update in the / directory: [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser).
Bumps the go_modules group with 1 update in the /cmd/controller directory: [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser).

Updates `github.com/vektah/gqlparser/v2` from 2.5.11 to 2.5.15
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](https://github.com/vektah/gqlparser/compare/v2.5.11...v2.5.15)

Updates `github.com/vektah/gqlparser/v2` from 2.5.11 to 2.5.15
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](https://github.com/vektah/gqlparser/compare/v2.5.11...v2.5.15)

---
updated-dependencies:
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-18 14:10:20 +02:00
Tim Ramlot
54413af098
upgrade go dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-06-13 20:08:15 +02:00
dependabot[bot]
b7c45631eb
Bump the go_modules group across 2 directories with 1 update
Bumps the go_modules group with 1 update in the / directory: [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go).
Bumps the go_modules group with 1 update in the /cmd/controller directory: [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go).


Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.5.2 to 1.6.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/internal/v1.5.2...sdk/azcore/v1.6.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.5.2 to 1.6.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/internal/v1.5.2...sdk/azcore/v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-11 20:21:55 +00:00
Tim Ramlot
9483f5ddc2
upgrade dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-05-17 14:33:18 +02:00
Tim Ramlot
81232c2fe3
revert in-tree ParseDN function now that upstream ParseDN function has been fixed
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-05-09 21:41:09 +02:00
Erik Godding Boye
8f99f40cbb
Upgrade K8s dependencies to v0.30.0
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
2024-04-28 13:02:36 +02:00
Ashley Davis
be3ac3d1a4
bump /x/net to fix CVE-2023-45288
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2024-04-22 12:50:28 +01:00
Richard Wall
4314c3ae78 Bump github.com/go-jose/go-jose to v3.0.3 to fix CVE-2024-28180
find . -name go.mod -execdir go get github.com/go-jose/go-jose/v3@v3.0.3 \;
make tidy

Signed-off-by: Richard Wall <richard.wall@venafi.com>
2024-03-14 14:23:41 +00:00
Tim Ramlot
531e1e46c7
bump google.golang.org/protobuf fixing GO-2024-2611
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-03-07 13:52:17 +01:00
Tim Ramlot
a2b3cc81c3
stop using github.com/go-ldap/ldap/v3 ParseDN and use a custom ParseDN function instead
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-02-20 08:34:53 +01:00
Tim Ramlot
012794e891
upgrade dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-02-17 10:33:31 +01:00
Tim Ramlot
893d30d938
migrate to github.com/aws/aws-sdk-go-v2
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-02-08 17:15:28 +01:00
Tim Ramlot
8f5d3aa58c
upgrade and cleanup dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-28 10:59:23 +01:00
Tim Ramlot
9a049532d0
Update Azure SDK and remove deprecated autorest dependency
Co-authored-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
2024-01-12 12:06:34 +01:00
Tim Ramlot
790a824a49
bump dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2024-01-03 16:18:35 +01:00
Adam Talbot
247a034116 feat: update gateway api to v1
Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
2023-12-18 21:00:42 +00:00
Tim Ramlot
63c1636a83
run 'make tidy' and 'make update-licenses'
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-11-29 13:41:46 +01:00
Joe North
4e03eb1283 Update AWS SDK for Go version
Signed-off-by: Joe North <jbnorth@amazon.com>
2023-11-28 19:55:23 +00:00
Tim Ramlot
6f7ebbed7b
replace deprecated pkcs12 function call with pkcs12.LegacyRC2
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-11-27 12:32:19 +01:00
Tim Ramlot
99d473bbf1
bump the go-jose dependency
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-11-24 14:32:53 +01:00
Tim Ramlot
c953e48b7e
fix CVE alert
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-11-15 15:04:59 +01:00
Tim Ramlot
d756311b2e
bump grpc library version to fix CVE alert
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-10-27 13:14:02 +02:00
Ashley Davis
e514b1acf8
bump golang.org/x/net v0.15.0 => v0.17.0
part of addressing CVE-2023-44487 / CVE-2023-39325
(which, again, we're not super concerned about)

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2023-10-19 09:47:18 +01:00
Tim Ramlot
ef3bd7d3b2
upgrade all dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-09-28 12:07:27 +02:00
Tim Ramlot
6916dbec34
fix go-restful 'DO NOT USE' version
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-09-26 13:40:05 +02:00
Tim Ramlot
9749f1253d
upgrade dependencies
Co-authored-by: Paul Merrison <paul@tetrate.io>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-09-12 11:38:10 +02:00
Tim Ramlot
2d83af777b
upgrade to k8s 1.28.1
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-08-25 17:39:02 +02:00
Tim Ramlot
3fc1f8a580
upgrade all dependencies
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-08-24 19:54:25 +02:00
Tim Ramlot
82ec7b3ee0
downgrade k8s.io/kube-openapi
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-24 09:53:13 +02:00
Luca Comellini
3ff638b6f3
Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-07-20 10:35:20 -07:00
Tim Ramlot
90f84b9c40
remove VCert fork dependency replace statement
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-10 11:26:16 +02:00
Tim Ramlot
7098c25a55
move e2e framework back to e2e module
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-07 19:26:10 +02:00
Tim Ramlot
5ba29272c0
add validation to pki CertificateTemplate function
and add support for add DontAllowInsecureCSRUsageDefinition featuregate
to use old behavior in controller

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-07-05 13:04:21 +02:00
Luca Comellini
8a5704635a
Bump sigs.k8s.io/controller-runtime to v0.15.0
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-23 17:34:28 -07:00
Luca Comellini
bf6bbb19de
Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-18 21:55:47 -07:00
irbekrm
5ee7b50ca8 Bumps c/r to latest commit
To ensure that there is as little diff as possible with c/r 0.15

Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-11 12:13:19 +01:00
irbekrm
97a3eb8697 Makes test framework accessible externally
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-10 12:09:35 +01:00
irbekrm
b8029dc758 Fix trivy vulnerabilities
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-09 09:51:09 +01:00
Tim Ramlot
2687b02e3f
update dependencies and LICENSE files
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-05-05 18:08:42 +02:00
irbekrm
0d64973359 Fix otel incompatibilities
Signed-off-by: irbekrm <irbekrm@gmail.com>
2023-05-05 16:32:25 +01:00
Luca Comellini
b52ed6303d Bump sigs.k8s.io/controller-runtime
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-05 16:32:25 +01:00
Luca Comellini
1bfc131e6a Bump sigs.k8s.io/controller-tools to v0.12.0
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-05 16:32:25 +01:00
Luca Comellini
a57c4abb14 Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-05-05 16:32:25 +01:00
Tim Ramlot
3ed79f9129
upgrade vault
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
2023-04-25 09:22:19 +02:00
Luca Comellini
9219bc409b
Bump Helm to v3.11.2
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-04-11 11:39:37 -07:00
Tim Ramlot
1d28b4f31c
Bump k8s.io dependencies
Signed-off-by: Luca Comellini <luca.com@gmail.com>
2023-04-07 10:36:47 +02:00
Maël Valais
e9f81ddc1c go work sync
Signed-off-by: Maël Valais <mael@vls.dev>
2023-04-06 16:34:21 +02:00
Maël Valais
e309dca4ba go: update github.com/google/pprof to work around "go work sync" failure
Signed-off-by: Maël Valais <mael@vls.dev>
2023-04-06 16:33:20 +02:00