Skip to content

Update dependencies #94

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Conversation

ItalyPaleAle
Copy link

@ItalyPaleAle ItalyPaleAle commented Feb 2, 2023

We use this library in Dapr and we noticed that was depending on outdated dependencies, including some like github.com/satori/go.uuid which had security vulnerabilities.

Hopefully this upgraded most dependencies (not all - I can't easily upgrade protobufs to the new package).

Note: It now requires Go 1.18+

PS: I cannot run tests because I don't have an Alicloud account. Please let me know how I can run tests, since Travis doesn't seem to be working?

@CLAassistant
Copy link

CLAassistant commented Feb 2, 2023

CLA assistant check
All committers have signed the CLA.

@Actimermao
Copy link
Contributor

We use this library in Dapr and we noticed that was depending on outdated dependencies, including some like github.com/satori/go.uuid which had security vulnerabilities.

Hopefully this upgraded most dependencies (not all - I can't easily upgrade protobufs to the new package).

Note: It now requires Go 1.18+

PS: I cannot run tests because I don't have an Alicloud account. Please let me know how I can run tests, since Travis doesn't seem to be working?

First of all, thanks for your advice. In view of stability and our internal open source process, we have released a pre-release version of v1.8.0-rc.1 using go 1.18 that you can try out first

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants