chore(go.mod) fix operator cve

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
eclipse-che · May 16, 2024 · 1995646 · 1995646
1 parent a5433b0
commit 1995646
Show file tree

Hide file tree

Showing 322 changed files with 28,435 additions and 10,820 deletions.
diff --git a/DEPENDENCIES.md b/DEPENDENCIES.md
@@ -327,7 +327,7 @@
 | [gopkg.in/op/go-logging.v1@b2cb9fa56473e98db8caba80237377e83fe44db5](https://github.com/op/go-logging.git)                                                                                       | BSD-3-Clause | [clearlydefined](https://clearlydefined.io/definitions/git/github/op/go-logging/b2cb9fa56473e98db8caba80237377e83fe44db5) |
 | [gopkg.in/resty.v1@v1.12.0](https://github.com/go-resty/resty.git)                                                                                                                               | MIT | [clearlydefined](https://clearlydefined.io/definitions/git/github/go-resty/resty/fa5875c0caa5c260ab78acec5a244215a730247f) |
 | [gopkg.in/tomb.v2@d5d1b5820637886def9eef33e03a27a9f166942c](https://github.com/go-tomb/tomb.git)                                                                                                 | BSD-3-Clause | [clearlydefined](https://clearlydefined.io/definitions/git/github/go-tomb/tomb/d5d1b5820637886def9eef33e03a27a9f166942c) |
-| [gopkg.in/yaml.v3@eeeca48fe7764f320e4870d231902bf9c1be2c08](https://github.com/go-yaml/yaml.git)                                                                                                 | Apache-2.0, Apache-2.0 AND MIT, MIT | [clearlydefined](https://clearlydefined.io/definitions/git/github/go-yaml/yaml/eeeca48fe7764f320e4870d231902bf9c1be2c08) |
+| [gopkg.in/yaml.v3@v3.0.1](https://github.com/go-yaml/yaml.git)                                                                                                                                   | Apache-2.0, Apache-2.0 AND MIT, MIT | [clearlydefined](https://clearlydefined.io/definitions/git/github/go-yaml/yaml/f6f7691b1fdeb513f56608cd2c32c51f8194bf51) |
 | [k8s.io/component-helpers@v0.20.1](https://github.com/kubernetes/component-helpers.git)                                                                                                          | Apache-2.0 | [clearlydefined](https://clearlydefined.io/definitions/git/github/kubernetes/component-helpers/fb2b7e6065f426f2dac708ad93518177c879a9ab) |
 | [github.com/yvasiyarov/go-metrics@c25f46c4b94079672242ec48a545e7ca9ebe3aec](https://github.com/yvasiyarov/go-metrics.git)                                                                        | BSD-2-Clause | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23519) |
 | [github.com/go-bindata/go-bindata/v3@v3.1.3](https://github.com/go-bindata/go-bindata.git)                                                                                                       | CC0-1.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23561) |
@@ -398,7 +398,7 @@
 | [github.com/jpillora/backoff@v1.0.0](https://github.com/jpillora/backoff.git)                                                                                                                    | MIT | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23731) |
 | [github.com/moby/spdystream@v0.2.0](https://github.com/moby/spdystream.git)                                                                                                                      | Apache-2.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23294) |
 | [github.com/operator-framework/api@v0.10.0](https://github.com/operator-framework/api.git)                                                                                                       | Apache-2.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23754) |
-| [github.com/prometheus/client_golang@v1.11.0](https://github.com/prometheus/client_golang.git)                                                                                                   | Apache-2.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23732) |
+| [github.com/prometheus/client_golang@v1.11.1](https://github.com/prometheus/client_golang.git)                                                                                                   | Apache-2.0 | [clearlydefined](https://clearlydefined.io/definitions/git/github/prometheus/client_golang/989baa30fe956631907493ccee1f8e7708660d96) |
 | [github.com/redhat-cop/operator-utils@v1.1.4](https://github.com/redhat-cop/operator-utils.git)                                                                                                  | Apache-2.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23755) |
 | [github.com/scylladb/go-set@v1.0.2](https://github.com/scylladb/go-set.git)                                                                                                                      | Apache-2.0 | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23757) |
 | [go.uber.org/goleak@v1.1.10](https://github.com/uber-go/goleak.git)                                                                                                                              | MIT | [CQ](https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23758) |
@@ -446,7 +446,7 @@
 | [golang.org/x/xerrors@5ec99f83aff198f5fbd629d6c8d8eb38a04218ca](https://cs.opensource.google/go)                                                                                                 | BSD-3-Clause | N/A |
 | [golang.org/x/oauth2@ee480838109b20d468babcb00b7027c82f962065](https://cs.opensource.google/go)                                                                                                  | BSD-3-Clause | N/A |
 | [golang.org/x/mobile@d3739f865fa66d07c1f506505c18aac71a8ead6e](https://cs.opensource.google/go)                                                                                                  | BSD-3-Clause | N/A |
-| [github.com/devfile/api/v2@v2.2.2](https://github.com/devfile/api.git)                                                                                         | Apache-2.0 | [clearlydefined](https://clearlydefined.io/definitions/git/github/devfile/api/a6ec0a38307b63a29fad2eea945cc69bee97a683) |
+| [github.com/devfile/api/v2@v2.2.2](https://github.com/devfile/api.git)                                                                                                                           | Apache-2.0 | [clearlydefined](https://clearlydefined.io/definitions/git/github/devfile/api/a6ec0a38307b63a29fad2eea945cc69bee97a683) |
 | [github.com/che-incubator/kubernetes-image-puller-operator@0128446f5af78587c0427a35d693bbb8d24036bc](https://github.com/che-incubator/kubernetes-image-puller-operator.git)                      | EPL-2.0 | todo |
 | [github.com/devfile/devworkspace-operator@v0.25.0](https://github.com/devfile/devworkspace-operator.git)                                                                                         | Apache-2.0 | [clearlydefined](https://https://clearlydefined.io/definitions/git/github/devfile/devworkspace-operator/3c083e4840f2f26c5c8abd95c745d8f09666b586) |
 | [github.com/gophercloud/gophercloud@v0.1.0](https://github.com/gophercloud/gophercloud)                                                                                                          | Apache-2.0 | [clearlydefined](https://clearlydefined.io/definitions/go/golang/github.com%2Fgophercloud/gophercloud/v0.1.0) |

diff --git a/go.mod b/go.mod
@@ -29,7 +29,7 @@ require (
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
-	github.com/cespare/xxhash/v2 v2.1.2 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/emicklei/go-restful/v3 v3.9.0 // indirect
 	github.com/evanphx/json-patch v5.6.0+incompatible // indirect
@@ -44,7 +44,7 @@ require (
 	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/google/gnostic v0.5.7-v3refs // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
-	github.com/google/uuid v1.1.2 // indirect
+	github.com/google/uuid v1.3.0 // indirect
 	github.com/imdario/mergo v0.3.13 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/mailru/easyjson v0.7.6 // indirect
@@ -63,16 +63,15 @@ require (
 	github.com/spf13/pflag v1.0.5 // indirect
 	go.uber.org/atomic v1.7.0 // indirect
 	go.uber.org/multierr v1.6.0 // indirect
-	golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b // indirect
+	golang.org/x/oauth2 v0.10.0 // indirect
 	golang.org/x/sys v0.15.0 // indirect
 	golang.org/x/term v0.15.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/genproto v0.0.0-20220502173005-c8bf987b8c21 // indirect
-	google.golang.org/grpc v1.49.0 // indirect
-	google.golang.org/protobuf v1.28.1 // indirect
+	google.golang.org/grpc v1.58.3 // indirect
+	google.golang.org/protobuf v1.34.1 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
@@ -93,7 +92,8 @@ require (
 	golang.org/x/lint v0.0.0-20200302205851-738671d3881b // indirect
 	golang.org/x/mod v0.12.0 // indirect
 	golang.org/x/tools v0.13.0 // indirect
-	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
+	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98 // indirect
 	honnef.co/go/tools v0.0.1-2020.1.3 // indirect
 )
 
@@ -148,7 +148,7 @@ replace (
 	github.com/bugsnag/bugsnag-go => github.com/bugsnag/bugsnag-go v1.5.3
 	github.com/bugsnag/panicwrap => github.com/bugsnag/panicwrap v1.2.0
 	github.com/census-instrumentation/opencensus-proto => github.com/census-instrumentation/opencensus-proto v0.2.1
-	github.com/cespare/xxhash/v2 => github.com/cespare/xxhash/v2 v2.1.0
+	github.com/cespare/xxhash/v2 => github.com/cespare/xxhash/v2 v2.2.0
 	github.com/chai2010/gettext-go => github.com/chai2010/gettext-go v0.0.0-20160711120539-c6fed771bfd5
 	github.com/chzyer/logex => github.com/chzyer/logex v1.1.10
 	github.com/chzyer/readline => github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e
@@ -252,7 +252,7 @@ replace (
 	github.com/google/martian => github.com/google/martian v0.0.0-20180813215018-c223d6f7955e
 	github.com/google/pprof => github.com/google/pprof v0.0.0-20180921154107-7dadf64105bb
 	github.com/google/renameio => github.com/google/renameio v0.1.0
-	github.com/google/uuid => github.com/google/uuid v1.1.2
+	github.com/google/uuid => github.com/google/uuid v1.3.0
 	github.com/googleapis/gax-go/v2 => github.com/googleapis/gax-go/v2 v2.0.5
 	github.com/googleapis/gnostic => github.com/googleapis/gnostic v0.4.2
 	github.com/gopherjs/gopherjs => github.com/gopherjs/gopherjs v0.0.0-20200217142428-fce0ec30dd00
@@ -384,8 +384,8 @@ replace (
 	github.com/pmezard/go-difflib => github.com/pmezard/go-difflib v1.0.0
 	github.com/posener/complete => github.com/posener/complete v1.1.1
 	github.com/pquerna/cachecontrol => github.com/pquerna/cachecontrol v0.0.0-20171018203845-0dec1b30a021
-	github.com/prometheus/client_golang => github.com/prometheus/client_golang v1.11.0
-	github.com/prometheus/client_model => github.com/prometheus/client_model v0.2.0
+	github.com/prometheus/client_golang => github.com/prometheus/client_golang v1.14.0
+	github.com/prometheus/client_model => github.com/prometheus/client_model v0.3.0
 	github.com/prometheus/common => github.com/prometheus/common v0.26.0
 	github.com/prometheus/procfs => github.com/prometheus/procfs v0.6.0
 	github.com/redhat-cop/operator-utils => github.com/redhat-cop/operator-utils v1.1.4
@@ -445,14 +445,14 @@ replace (
 	go.uber.org/zap => go.uber.org/zap v1.18.1
 	golang.org/x/crypto => golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83
 	golang.org/x/exp => golang.org/x/exp v0.0.0-20190426190305-956cc1757749
+	golang.org/x/oauth2 => golang.org/x/oauth2 v0.10.0
 	gomodules.xyz/jsonpatch/v2 => gomodules.xyz/jsonpatch/v2 v2.0.1
 	google.golang.org/api => google.golang.org/api v0.20.0
 	google.golang.org/appengine => google.golang.org/appengine v1.6.5
 	google.golang.org/cloud => cloud.google.com/go v0.0.0-20200305180117-a6b88cf34a49
-	google.golang.org/genproto => google.golang.org/genproto v0.0.0-20201022181438-0ff5f38871d5
-	google.golang.org/grpc => google.golang.org/grpc v1.27.0
-	google.golang.org/grpc/cmd/protoc-gen-go-grpc => google.golang.org/grpc/cmd/protoc-gen-go-grpc v0.0.0-20200709232328-d8193ee9cc3e
-	google.golang.org/protobuf => google.golang.org/protobuf v1.25.0
+	google.golang.org/genproto/googleapis/rpc => google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98 // indirect
+	google.golang.org/grpc => google.golang.org/grpc v1.58.3
+	google.golang.org/protobuf => google.golang.org/protobuf v1.34.1
 	gopkg.in/airbrake/gobrake.v2 => gopkg.in/airbrake/gobrake.v2 v2.0.9
 	gopkg.in/alecthomas/kingpin.v2 => gopkg.in/alecthomas/kingpin.v2 v2.2.6
 	gopkg.in/check.v1 => gopkg.in/check.v1 v1.0.0-20141024133853-64131543e789
@@ -472,7 +472,7 @@ replace (
 	gopkg.in/tomb.v1 => gopkg.in/tomb.v1 v1.0.0-20161208151619-d5d1b5820637
 	gopkg.in/tomb.v2 => gopkg.in/tomb.v2 v2.0.0-20161208151619-d5d1b5820637
 	gopkg.in/yaml.v2 => gopkg.in/yaml.v2 v2.4.0
-	gopkg.in/yaml.v3 => gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776
+	gopkg.in/yaml.v3 => gopkg.in/yaml.v3 v3.0.1
 	grpc-ecosystem/grpc-health-probe => grpc-ecosystem/grpc-health-probe v0.3.2
 	helm.sh/helm/v3 => helm.sh/helm/v3 v3.0.0-20200422233323-0a9a9a88e8af
 	honnef.co/go/tools => honnef.co/go/tools v0.0.0-20200822191040-81508471876c