-
Notifications
You must be signed in to change notification settings - Fork 141
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump some deps #732
Bump some deps #732
Changes from all commits
2253869
abcb94d
01a6f47
ee9c051
4b164a1
543268b
8e1a3b5
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1 +1 @@ | ||
/*.t | ||
*/*.t |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -6,13 +6,13 @@ import ( | |
"path/filepath" | ||
"time" | ||
|
||
"github.com/google/uuid" | ||
tap "github.com/mndrix/tap-go" | ||
"github.com/mrunalp/fileutils" | ||
rspec "github.com/opencontainers/runtime-spec/specs-go" | ||
"github.com/opencontainers/runtime-tools/generate" | ||
"github.com/opencontainers/runtime-tools/specerror" | ||
"github.com/opencontainers/runtime-tools/validation/util" | ||
uuid "github.com/satori/go.uuid" | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. but why tho? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The appropriate commit message explains it (alas github downplays individual commits in its UI). Here's a copy-paste to save you some clicks:
To reiterate, the I think it was originally suggested by @thaJeztah in some issue or PR. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Thanks for this clarification. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Yes, I recall Justin made a round of some PRs to replace some UUID libraries with this one (for another UUID library which had a vulnerability); https://github.com/pulls?q=is%3Apr+author%3Ajustincormack+uuid+is%3Aclosed And notary switched to the UUID library from distribution/distribution (don't think we want to add that as dependency though); moby/moby#38868 So, given that google/uuid looks to be used in various codebases in the ecosystem, it's probably an OK choice |
||
) | ||
|
||
func main() { | ||
|
@@ -31,7 +31,7 @@ func main() { | |
} | ||
|
||
testPath := filepath.Join(bundleDir, "test.json") | ||
r.SetID(uuid.NewV4().String()) | ||
r.SetID(uuid.NewString()) | ||
// generate a config has all the testing properties | ||
g, err := util.GetDefaultGenerator() | ||
if err != nil { | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Perhaps we should update this one to a current version as well for Go 1.17 compatibility (see docker/cli#3269)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This was an implicit upgrade (caused by github.com/opencontainers/selinux bump). We can surely do an explicit update, too.