-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is wri… #2013
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is wri… #2013
Conversation
…tten in code & updates versions due to fixed CVEs
…tten in code & updates versions due to fixed CVEs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
Could you please resolve the conflicts and add a changelog and then we can merge this |
…tten in code & updates versions due to fixed CVEs
…tten in code & updates versions due to fixed CVEs
…tten in code & updates versions due to fixed CVEs
…ot_using_alpine_3_16_as_it_is_written_in_code' into feature/Oauth2-proxy_v7_4_0_is_not_using_alpine_3_16_as_it_is_written_in_code # Conflicts: # go.mod # go.sum
…tten in code & updates versions due to fixed CVEs
…tten in code & updates versions due to fixed CVEs
…tten in code & updates versions due to fixed CVEs
Conflits were solved. Sorry, for the time it took, I was rather busy. |
…tten in code & updates versions due to fixed CVEs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks great, thanks!
@@ -907,6 +907,7 @@ N/A | |||
- `-bitbucket-team` Restrict authorization to users that are part of this Bitbucket team | |||
- [#211](https://github.com/oauth2-proxy/oauth2-proxy/pull/211) Switch from dep to go modules (@steakunderscore) | |||
- [#145](https://github.com/oauth2-proxy/oauth2-proxy/pull/145) Add support for OIDC UserInfo endpoint email verification (@rtluckie) | |||
- [#2013](https://github.com/oauth2-proxy/oauth2-proxy/pull/2013) Upgrade alpine to version 3.17.2 and library dependencies (@miguelborges99) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oops, this was in the wrong place, will need to move that up to the top
oauth2-proxy#2013) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Fixes CVE-2022-41721 (oauth2-proxy#1994) See: https://avd.aquasec.com/nvd/2022/cve-2022-41717/ * update checkout actions (oauth2-proxy#1981) * Fix a typo in oauthproxy.go (oauth2-proxy#2021) * fix typo (oauth2-proxy#2001) * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs * Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is written in code & updates versions due to fixed CVEs --------- Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com> Co-authored-by: Jeroen Landheer <jlandheer@bintelligence.nl> Co-authored-by: Ryuichi Watanabe <ryucrosskey@gmail.com> Co-authored-by: Ho Kim <ho.kim@ulagbulag.io> Co-authored-by: Terrell Russell <terrellrussell@gmail.com>
Description
Upgrade alpine and dependencies
Motivation and Context
Provide the latest CVE fixes and solve issue #1929
How Has This Been Tested?
Under test
Checklist: