Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gcs/v2: bump cloud.google.com/go/storage to 1.34.0 #488

Merged
merged 3 commits into from
May 17, 2024

Commits on Apr 18, 2024

  1. gcs/v2: bump cloud.google.com/go/storage to 1.35.0

    The storage library that gcs depends on transitively imports grpc in
    version 1.50.0, which is vulnerable to GHSA-m425-mq94-257g.
    
    While this is a server-side vulnerability, therefore the package is not
    directly vulnerable (nor its clients), this dependency still causes
    advisories to be produced against this package, so we update those now.
    lbajolet-hashicorp committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    d9b73be View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. .github: run tests on go 1.19, 1.20 and 1.21

    Sicne we require go v1.19 now at minimum, we cannot run tests on go
    v1.17 or v1.18 anymore.
    
    Since there are more recent versions of Go available as well, we start
    testing the packages on those versions in addition to 1.19.
    lbajolet-hashicorp committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    ce9510d View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    9c95e67 View commit details
    Browse the repository at this point in the history