Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulns #33

Merged
merged 55 commits into from
Dec 21, 2023
Merged

Vulns #33

merged 55 commits into from
Dec 21, 2023

Conversation

daniel-garcia
Copy link

No description provided.

luca-nardelli and others added 30 commits November 29, 2022 15:46
When attempting to connect to a PostgreSQL database using certificate
credentials, authentication may fail due to permissions issues on the
certificate files. When using migrate in Kubernetes, this issue may be
unavoidable when using secrets.

The github.com/lib/pq library has resolved this issue as of v1.10.6, so
this commit updates that library to the latest release version (v1.10.9)
to resolve the issue in migrate.
In order to support running migrations through PgBouncer which does not
support advisory locks.
Signed-off-by: guoguangwu <[email protected]>
* Update dktest from v0.3.16 to v0.4.0 to fix docker vulnerability
* Fix linter issues
* Update outdated GitHub Actions
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0.
- [Commits](golang/crypto@v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
…/go_modules/golang.org/x/crypto-0.17.0

Bump golang.org/x/crypto from 0.14.0 to 0.17.0
dependabot bot and others added 25 commits December 20, 2023 05:37
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.55.0 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.55.0...v1.56.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Add syntax highlighting to Postgres example
…/go_modules/google.golang.org/grpc-1.56.3

Bump google.golang.org/grpc from 1.55.0 to 1.56.3
Update lib/pq to fix cert permissions issues
Move supported go version to standard place
…e-spanner

Updated version of spanner to support sequences and generate uuid
clickhouse: Quote db name in ensureVersionTable
add tests for scylladb. add scylladb to docs
Defer rollback of transactions
…e_database_migrations

clickhouse: add to README.md and examples database creation
Update aws-sdk-go to adress vulerabilitiy
Add support for locking table in pgx-driver
@daniel-garcia daniel-garcia merged commit 8447691 into ib Dec 21, 2023
0 of 9 checks passed
@daniel-garcia daniel-garcia deleted the vulns branch December 21, 2023 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.