Skip to content

Commit

Permalink
update packages to fix vulnerabilities in dependencies (#17418)
Browse files Browse the repository at this point in the history
  • Loading branch information
AliDatadog authored Jun 2, 2023
1 parent 3ad4612 commit c23dc78
Show file tree
Hide file tree
Showing 6 changed files with 149 additions and 68 deletions.
43 changes: 43 additions & 0 deletions .copyright-overrides.yml
Original file line number Diff line number Diff line change
Expand Up @@ -131,6 +131,24 @@ github.com/google/go-containerregistry:
- "Copyright 2020 Google LLC All Rights Reserved."
- "Copyright 2021 Google LLC All Rights Reserved."
- "Copyright 2022 Google LLC All Rights Reserved."
github.com/google/go-containerregistry/internal/compression:
- "Copyright 2018 Google LLC All Rights Reserved."
- "Copyright 2019 Google LLC All Rights Reserved."
- "Copyright 2020 Google LLC All Rights Reserved."
- "Copyright 2021 Google LLC All Rights Reserved."
- "Copyright 2022 Google LLC All Rights Reserved."
github.com/google/go-containerregistry/internal/zstd:
- "Copyright 2018 Google LLC All Rights Reserved."
- "Copyright 2019 Google LLC All Rights Reserved."
- "Copyright 2020 Google LLC All Rights Reserved."
- "Copyright 2021 Google LLC All Rights Reserved."
- "Copyright 2022 Google LLC All Rights Reserved."
github.com/google/go-containerregistry/pkg/compression:
- "Copyright 2018 Google LLC All Rights Reserved."
- "Copyright 2019 Google LLC All Rights Reserved."
- "Copyright 2020 Google LLC All Rights Reserved."
- "Copyright 2021 Google LLC All Rights Reserved."
- "Copyright 2022 Google LLC All Rights Reserved."
github.com/google/licenseclassifier/v2:
- "Copyright 2017 Google LLC All Rights Reserved."
- "Copyright 2020 Google LLC All Rights Reserved."
Expand Down Expand Up @@ -191,3 +209,28 @@ github.com/google/flatbuffers: Copyright (c) 2014 Google
# * https://github.com/godror/knownpb/blob/main/internal/writer.go
github.com/godror/knownpb/internal: Copyright 2014, 2021 Tamás Gulácsi
github.com/godror/knownpb/timestamppb: Copyright 2019, 2021 Tamás Gulácsi


github.com/google/s2a-go: Copyright (c) 2020 Google
github.com/google/s2a-go/fallback: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/authinfo: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/handshaker: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/handshaker/service: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/common_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/s2a_context_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/s2a_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/v2/common_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/v2/s2a_context_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/proto/v2/s2a_go_proto: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/record: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/record/internal/aeadcrypter: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/record/internal/halfconn: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/tokenmanager: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/v2: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/v2/certverifier: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/v2/remotesigner: Copyright (c) 2020 Google
github.com/google/s2a-go/internal/v2/tlsconfigstore: Copyright (c) 2020 Google
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1: Copyright 2018 New York University
go.opentelemetry.io/otel/semconv/internal: Copyright The OpenTelemetry Authors
go.opentelemetry.io/otel/semconv/v1.12.0: Copyright The OpenTelemetry Authors
golang.org/x/crypto/chacha20poly1305: Copyright (c) 2009 The Go Authors. All rights reserved
26 changes: 26 additions & 0 deletions LICENSE-3rdparty.csv
Original file line number Diff line number Diff line change
Expand Up @@ -868,13 +868,16 @@ core,github.com/google/go-cmp/cmp/internal/flags,BSD-3-Clause,Copyright (c) 2017
core,github.com/google/go-cmp/cmp/internal/function,BSD-3-Clause,Copyright (c) 2017 The Go Authors. All rights reserved.
core,github.com/google/go-cmp/cmp/internal/value,BSD-3-Clause,Copyright (c) 2017 The Go Authors. All rights reserved.
core,github.com/google/go-containerregistry/internal/and,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/compression,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/estargz,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/gzip,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/redact,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/retry,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/retry/wait,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/verify,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/internal/zstd,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/pkg/authn,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/pkg/compression,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/pkg/logs,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/pkg/name,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
core,github.com/google/go-containerregistry/pkg/v1,Apache-2.0,Copyright 2018 Google LLC All Rights Reserved. | Copyright 2019 Google LLC All Rights Reserved. | Copyright 2020 Google LLC All Rights Reserved. | Copyright 2021 Google LLC All Rights Reserved. | Copyright 2022 Google LLC All Rights Reserved.
Expand Down Expand Up @@ -911,6 +914,25 @@ core,github.com/google/pprof/profile,Apache-2.0,Andrew Hunter <andrewhhunter@gma
core,github.com/google/pprof/third_party/d3,BSD-3-Clause,Andrew Hunter <[email protected]> | Copyright 2010-2017 Mike Bostock | Google Inc. | Hyoun Kyu Cho <[email protected]> | Martin Spier <[email protected]> | Raul Silvera <[email protected]> | Taco de Wolff <[email protected]> | Tipp Moseley <[email protected]>
core,github.com/google/pprof/third_party/d3flamegraph,Apache-2.0,Andrew Hunter <[email protected]> | Google Inc. | Hyoun Kyu Cho <[email protected]> | Martin Spier <[email protected]> | Raul Silvera <[email protected]> | Taco de Wolff <[email protected]> | Tipp Moseley <[email protected]>
core,github.com/google/pprof/third_party/svgpan,BSD-3-Clause,Andrew Hunter <[email protected]> | Copyright 2009-2017 Andrea Leofreddi <[email protected]>. All rights reserved | Google Inc. | Hyoun Kyu Cho <[email protected]> | Martin Spier <[email protected]> | Raul Silvera <[email protected]> | Taco de Wolff <[email protected]> | Tipp Moseley <[email protected]>
core,github.com/google/s2a-go,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/fallback,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/authinfo,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/handshaker,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/handshaker/service,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/common_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/s2a_context_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/s2a_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/v2/common_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/v2/s2a_context_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/proto/v2/s2a_go_proto,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/record,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/record/internal/aeadcrypter,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/record/internal/halfconn,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/tokenmanager,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/v2,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/v2/certverifier,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/v2/remotesigner,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/s2a-go/internal/v2/tlsconfigstore,Apache-2.0,Copyright (c) 2020 Google
core,github.com/google/uuid,BSD-3-Clause,"Copyright (c) 2009,2014 Google Inc. All rights reserved | Paul Borman <[email protected]> | bmatsuo | cd1 | dansouza | dsymonds | jboverfelt | shawnps | theory | wallclockbuilder"
core,github.com/google/wire,Apache-2.0,Chris Lewis <[email protected]> <[email protected]> <[email protected]> | Christina Austin <[email protected]> | Eno Compton <[email protected]> | Google LLC | Issac Trotts <[email protected]> <[email protected]> | Kumbirai Tanekha <[email protected]> | Oleg Kovalov <[email protected]> | Robert van Gent <[email protected]> <[email protected]> | Ross Light <[email protected]> <[email protected]> | Tuo Shan <[email protected]> <[email protected]> | Yoichiro Shimizu <[email protected]> | Zachary Romero <[email protected]> | ktr <[email protected]>
core,github.com/googleapis/enterprise-certificate-proxy/client,Apache-2.0,Copyright 2017 Google Inc.
Expand Down Expand Up @@ -985,6 +1007,7 @@ core,github.com/in-toto/in-toto-golang/in_toto,Apache-2.0,Copyright 2018 New Yor
core,github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common,Apache-2.0,Copyright 2018 New York University
core,github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1,Apache-2.0,Copyright 2018 New York University
core,github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2,Apache-2.0,Copyright 2018 New York University
core,github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1,Apache-2.0,Copyright 2018 New York University
core,github.com/inconshreveable/mousetrap,Apache-2.0,Copyright 2022 Alan Shreve (@inconshreveable)
core,github.com/invopop/jsonschema,MIT,Copyright (C) 2014 Alec Thomas
core,github.com/iovisor/gobpf/pkg/cpupossible,Apache-2.0,Copyright 2016 Kinvolk | Copyright 2016 PLUMgrid
Expand Down Expand Up @@ -1589,7 +1612,9 @@ core,go.opentelemetry.io/otel/sdk/metric/internal,Apache-2.0,Copyright The OpenT
core,go.opentelemetry.io/otel/sdk/metric/metricdata,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/sdk/resource,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/sdk/trace,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/semconv/internal,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/semconv/internal/v2,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/semconv/v1.12.0,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/semconv/v1.17.0,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/semconv/v1.17.0/httpconv,Apache-2.0,Copyright The OpenTelemetry Authors
core,go.opentelemetry.io/otel/trace,Apache-2.0,Copyright The OpenTelemetry Authors
Expand Down Expand Up @@ -1634,6 +1659,7 @@ core,golang.org/x/crypto/blake2b,BSD-3-Clause,Copyright (c) 2009 The Go Authors.
core,golang.org/x/crypto/blowfish,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/cast5,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/chacha20,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/chacha20poly1305,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/cryptobyte,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/cryptobyte/asn1,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
core,golang.org/x/crypto/curve25519,BSD-3-Clause,Copyright (c) 2009 The Go Authors. All rights reserved
Expand Down
Loading

0 comments on commit c23dc78

Please sign in to comment.