Matheus Macabu
2e2e89a816
[release-11.5.6] Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371 ( #106118 )
...
* Dependencies: Bump github.com/openfga/openfga to v1.8.13 to address CVE-2025-48371
* Static: Fix failing unit test import
2025-06-09 13:06:46 +02:00
Matheus Macabu
c0e2889cea
[release-11.5.5] Dependencies: Bump packages in modules with incorrect dependencies or outside of workspace ( #105461 )
...
Dependencies: Bump golang.org/x to latest
2025-05-15 14:52:51 +02:00
Matheus Macabu
f4ad2eb9ec
[release-11.5.5] Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.3 to v2.5.0 ( #105441 )
...
Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.3 to v2.5.0
2025-05-15 12:05:26 +02:00
Matheus Macabu
2aa89a90a2
[release-11.5.5] Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12 ( #105373 )
...
Dependencies: Bump github.com/openfga/openfga from v1.8.5 to v1.8.12
2025-05-14 14:17:25 +02:00
Matheus Macabu
919f46426c
[release-11.5.5] Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 ( #105252 )
...
Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0
2025-05-12 14:52:30 +02:00
Matheus Macabu
2e24578a72
[release-11.5.5] Chore: Bump Go version to 1.24.3 ( #105109 )
...
Chore: Bump Go version to 1.24.3
2025-05-08 16:08:08 +02:00
Mariell Hoversholm
bf3f23b558
[release-11.5.4] Go: Bump to 1.24.2 ( #103525 )
...
Go: Bump to 1.24.2
It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless.
Fixes: CVE-2025-22871
Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311
2025-04-08 17:24:33 +02:00
Matheus Macabu
cd63f38f47
[release-11.5.3] Chore: Bump dependencies to address security issues ( #101627 )
...
* Chore: Bump github.com/go-jose/go-jose/v3 to v3.0.4
* Chore: Bump github.com/ua-parser/uap-go to v0.0.0-20250213224047-9c035f085b90
* Chore: Bump golang.org/x/net to v0.36.0
* Chore: Use github.com/moby/moby version 27.4.1 instead of 26.0.0
* Chore: Bump github.com/openfga/openfga to v1.8.5
2025-03-06 10:12:17 +01:00
Matheus Macabu
29d35ec39c
[release-11.5.3] Chore: Bump Go to 1.23.7 ( #101581 )
...
Chore: Bump Go to 1.23.7
2025-03-05 09:59:05 +01:00
Matheus Macabu
9db9662213
[release-11.5.3] Chore: Update golang.org/x/crypto and golang.org/x/oauth2 to address security issues ( #101278 )
...
Chore: Update golang.org/x/crypto and golang.org/x/ouath2 to address security issues (#101268 )
- CVE-2025-22869 and Go issue https://go.dev/issue/71931 .
- CVE-2025-22868 and Go issue https://go.dev/issue/71490 .
(cherry picked from commit 3aedb9159e
2025-02-26 08:42:00 +01:00
Selene
0501ff9079
Codegen: Isolate schema generation code ( #98742 )
...
* Create go.mod files for plugins and core kinds
* Update go work and main go.mod dependencies
* Update pfs import
* Missing update of pfs dependency
* Remove fixed cuelang dependency
* Update codeowners
* Update workspace
* Update Dockerfile
* Missing go.mod codeowner
* Use intermediate kin-openapi dependency to make all workspaces to work
2025-01-10 13:33:51 +01:00
