Update dvsekhvalnov/jose2go to 1.3

release notes say: v1.3 fixed potential Invalid Curve Attack on NIST curves within ECDH key management. Upgrade strongly recommended. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
notaryproject · Apr 7, 2018 · 5ec7f60 · 5ec7f60
1 parent c30d5e3
commit 5ec7f60
Show file tree

Hide file tree

Showing 4 changed files with 316 additions and 152 deletions.
diff --git a/vendor.conf b/vendor.conf
@@ -8,7 +8,7 @@ github.com/docker/distribution      edc3ab29cdff8694dd6feb85cfeb4b5f1b38ed9c
 github.com/opencontainers/go-digest a6d0ee40d4207ea02364bd3b9e8e77b9159ba1eb
 github.com/docker/go-connections    7395e3f8aa162843a74ed6d48e79627d9792ac55
 github.com/docker/go                d30aec9fd63c35133f8f79c3412ad91a3b08be06
-github.com/dvsekhvalnov/jose2go     6387d3c1f5abd8443b223577d5a7e0f4e0e5731f   # v1.2
+github.com/dvsekhvalnov/jose2go     f21a8cedbbae609f623613ec8f81125c243212e6   # v1.3
 github.com/go-sql-driver/mysql      a0583e0143b1624142adab07e0e97fe106d99561   # v1.3
 github.com/gorilla/mux              e444e69cbd2e2e3e0749a2f3c717cec491552bbf
 github.com/jinzhu/gorm              5409931a1bb87e484d68d649af9367c207713ea2

diff --git a/vendor/github.com/dvsekhvalnov/jose2go/README.md b/vendor/github.com/dvsekhvalnov/jose2go/README.md