Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go version within go.mod #1043

Closed
nlacey opened this issue Dec 19, 2023 · 0 comments · Fixed by #1046
Closed

Update go version within go.mod #1043

nlacey opened this issue Dec 19, 2023 · 0 comments · Fixed by #1046
Assignees

Comments

@nlacey
Copy link

nlacey commented Dec 19, 2023

Currently you have go version set to 1.16 within your go.mod file.

The problem with this is you are missing the new (indirect) deps added to the go.mod file.
Which makes it easier to see indirect security problems

EA update go 1.16 to go 1.17 would give you

module github.com/lestrrat-go/jwx/v2

go 1.17

require (
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0
github.com/goccy/go-json v0.10.2
github.com/lestrrat-go/blackmagic v1.0.2
github.com/lestrrat-go/httprc v1.0.4
github.com/lestrrat-go/iter v1.0.2
github.com/lestrrat-go/option v1.0.1
github.com/segmentio/asm v1.2.0
github.com/stretchr/testify v1.8.4
golang.org/x/crypto v0.16.0
)

require (
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/lestrrat-go/httpcc v1.0.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
golang.org/x/sys v0.15.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants