Skip to content

Commit b315f04

Browse files
sarvodaya-kumar-26sarvodaya-kumar-26
committed
chore: update sensu/core to v2.21.4/v3.10.4 and address CVEs
- Upgrade github.com/sensu/core/v2 v2.21.3 → v2.21.4 - Upgrade github.com/sensu/core/v3 v3.10.3 → v3.10.4 - Upgrade golang.org/x/net v0.56.0 → v0.57.0 (GO-2026-5026, GO-2026-5029, GO-2026-5030, GO-2026-5027) - Upgrade google.golang.org/grpc v1.81.1 → v1.82.0 (GHSA-p77j-4mvh-x3m3) Unaddressable CVEs (no fix available): - github.com/mitchellh/mapstructure v1.5.0: GHSA-fv92-fjc5-jj9h, GHSA-2464-8j7c-4cjm (library unmaintained) - stdlib GO-2026-5037/5038/5039: requires Go toolchain upgrade beyond 1.26.5 Signed-off-by: Sarvodaya Kumar <sarvodaya.kumar.ctr@sumologic.com>
1 parent 48a7383 commit b315f04

4 files changed

Lines changed: 24 additions & 24 deletions

File tree

‎go.mod‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -72,10 +72,10 @@ require (
7272
go.uber.org/zap v1.28.0
7373
golang.org/x/crypto v0.54.0
7474
golang.org/x/mod v0.37.0
75-
golang.org/x/net v0.56.0
75+
golang.org/x/net v0.57.0
7676
golang.org/x/sys v0.47.0
7777
golang.org/x/time v0.14.0
78-
google.golang.org/grpc v1.81.1
78+
google.golang.org/grpc v1.82.0
7979
gopkg.in/h2non/filetype.v1 v1.0.3
8080
gopkg.in/yaml.v2 v2.4.0
8181
)
@@ -90,8 +90,8 @@ require (
9090
github.com/jonboulle/clockwork v0.5.0 // indirect
9191
github.com/kr/pty v1.1.8 // indirect
9292
github.com/prometheus/procfs v0.15.1 // indirect
93-
github.com/sensu/core/v2 v2.21.3
94-
github.com/sensu/core/v3 v3.10.3
93+
github.com/sensu/core/v2 v2.21.4
94+
github.com/sensu/core/v3 v3.10.4
9595
github.com/sensu/sensu-api-tools v0.2.1
9696
github.com/sensu/sensu-go/types v0.13.0
9797
github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 // indirect

‎go.sum‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1834,11 +1834,11 @@ github.com/ruudk/golang-pdf417 v0.0.0-20201230142125-a7e3863a1245/go.mod h1:pQAZ
18341834
github.com/sagikazarmark/locafero v0.12.0 h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4=
18351835
github.com/sagikazarmark/locafero v0.12.0/go.mod h1:sZh36u/YSZ918v0Io+U9ogLYQJ9tLLBmM4eneO6WwsI=
18361836
github.com/sensu/core/v2 v2.20.0/go.mod h1:fzr3qioLAHyLsBfq9I6ELVjL01NUNjqmQx4kj2tbDLo=
1837-
github.com/sensu/core/v2 v2.21.3 h1:7lLawBWzzXAhJdEBeYQz5O47NrgCsveognMx8AhtS6o=
1838-
github.com/sensu/core/v2 v2.21.3/go.mod h1:Y0G5v5Umk38J897JfIX+MllUigkzKHIdAV37NniPiEY=
1837+
github.com/sensu/core/v2 v2.21.4 h1:eLV7wTCrIyfmCGy2cydKDwLxCBnOR4ud7JKn4k/LS68=
1838+
github.com/sensu/core/v2 v2.21.4/go.mod h1:wNhepnDUxgPmIie4uDxDTckOkv3ByoOsyP+gu9T929U=
18391839
github.com/sensu/core/v3 v3.9.0/go.mod h1:AuupbIzmjYdzEkaEdmpzP/ZgrqQgHTovXVejzyTN6u4=
1840-
github.com/sensu/core/v3 v3.10.3 h1:5hYvbC2DmtpogS9S9sCSW3T2BzdVsgzuS5l68EIYA8w=
1841-
github.com/sensu/core/v3 v3.10.3/go.mod h1:JuNDpmRXWNhZPtyKGv6QZBrSqNEcf4Z8go8jWAs0OLg=
1840+
github.com/sensu/core/v3 v3.10.4 h1:23G8ejUWkySef3pBaIDgagZx01vWTbcY8ZNG6utco4c=
1841+
github.com/sensu/core/v3 v3.10.4/go.mod h1:01bf2cAxpA4RPYVbshcgaPaD/BFBnJITfQ9tt9Pi1xU=
18421842
github.com/sensu/etcd/api/v3 v3.0.0 h1:Y6p0RUtYaIaeuh4xIhxpJIVk/RigFaYBIxdJxl0zFYA=
18431843
github.com/sensu/etcd/api/v3 v3.0.0/go.mod h1:qyQj1HZPUV3B5cbAL8scG62+fyz5dSxxu0w8pn28N6Q=
18441844
github.com/sensu/etcd/client/pkg/v3 v3.0.0 h1:w22dKh6PfpcoXaNzEUcoeWKgg1LJfTMKVUJHcLHvBMw=
@@ -2228,8 +2228,8 @@ golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
22282228
golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
22292229
golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
22302230
golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
2231-
golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=
2232-
golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec=
2231+
golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=
2232+
golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU=
22332233
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
22342234
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
22352235
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -3004,8 +3004,8 @@ google.golang.org/grpc v1.65.0/go.mod h1:WgYC2ypjlB0EiQi6wdKixMqukr6lBc0Vo+oOgjr
30043004
google.golang.org/grpc v1.67.1/go.mod h1:1gLDyUQU7CTLJI90u3nXZ9ekeghjeM7pTDZlqFNg2AA=
30053005
google.golang.org/grpc v1.70.0/go.mod h1:ofIJqVKDXx/JiXrwr2IG4/zwdH9txy3IlF40RmcJSQw=
30063006
google.golang.org/grpc v1.71.1/go.mod h1:H0GRtasmQOh9LkFoCPDu3ZrwUtD1YGE+b2vYBYd/8Ec=
3007-
google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
3008-
google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
3007+
google.golang.org/grpc v1.82.0 h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU=
3008+
google.golang.org/grpc v1.82.0/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
30093009
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
30103010
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
30113011
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=

‎types/go.mod‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@ go 1.26.5
44

55
require (
66
github.com/robertkrimen/otto v0.2.1
7-
github.com/sensu/core/v2 v2.21.3
8-
github.com/sensu/core/v3 v3.10.3
7+
github.com/sensu/core/v2 v2.21.4
8+
github.com/sensu/core/v3 v3.10.4
99
github.com/sensu/sensu-api-tools v0.2.1
1010
github.com/stretchr/testify v1.11.1
1111
)
@@ -23,12 +23,12 @@ require (
2323
github.com/robfig/cron/v3 v3.0.1 // indirect
2424
github.com/sirupsen/logrus v1.9.3 // indirect
2525
go.etcd.io/etcd/api/v3 v3.5.10 // indirect
26-
golang.org/x/net v0.56.0 // indirect
26+
golang.org/x/net v0.57.0 // indirect
2727
golang.org/x/sys v0.47.0 // indirect
2828
golang.org/x/text v0.40.0 // indirect
2929
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
3030
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect
31-
google.golang.org/grpc v1.81.1 // indirect
31+
google.golang.org/grpc v1.82.0 // indirect
3232
google.golang.org/protobuf v1.36.11 // indirect
3333
gopkg.in/sourcemap.v1 v1.0.5 // indirect
3434
gopkg.in/yaml.v3 v3.0.1 // indirect

‎types/go.sum‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,10 @@ github.com/robertkrimen/otto v0.2.1 h1:FVP0PJ0AHIjC+N4pKCG9yCDz6LHNPCwi/GKID5pGG
3535
github.com/robertkrimen/otto v0.2.1/go.mod h1:UPwtJ1Xu7JrLcZjNWN8orJaM5n5YEtqL//farB5FlRY=
3636
github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
3737
github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
38-
github.com/sensu/core/v2 v2.21.3 h1:7lLawBWzzXAhJdEBeYQz5O47NrgCsveognMx8AhtS6o=
39-
github.com/sensu/core/v2 v2.21.3/go.mod h1:Y0G5v5Umk38J897JfIX+MllUigkzKHIdAV37NniPiEY=
40-
github.com/sensu/core/v3 v3.10.3 h1:5hYvbC2DmtpogS9S9sCSW3T2BzdVsgzuS5l68EIYA8w=
41-
github.com/sensu/core/v3 v3.10.3/go.mod h1:JuNDpmRXWNhZPtyKGv6QZBrSqNEcf4Z8go8jWAs0OLg=
38+
github.com/sensu/core/v2 v2.21.4 h1:eLV7wTCrIyfmCGy2cydKDwLxCBnOR4ud7JKn4k/LS68=
39+
github.com/sensu/core/v2 v2.21.4/go.mod h1:wNhepnDUxgPmIie4uDxDTckOkv3ByoOsyP+gu9T929U=
40+
github.com/sensu/core/v3 v3.10.4 h1:23G8ejUWkySef3pBaIDgagZx01vWTbcY8ZNG6utco4c=
41+
github.com/sensu/core/v3 v3.10.4/go.mod h1:01bf2cAxpA4RPYVbshcgaPaD/BFBnJITfQ9tt9Pi1xU=
4242
github.com/sensu/sensu-api-tools v0.2.1 h1:wjT5AFdboQ3jDwzBMcD38VJEwwWhPIIuReZrCi9Ezos=
4343
github.com/sensu/sensu-api-tools v0.2.1/go.mod h1:SNISS4OhwNSZI9/YKTQr1bghOEwed9ZT4v+ztKk1Mq0=
4444
github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
@@ -72,8 +72,8 @@ golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn
7272
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
7373
golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
7474
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
75-
golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=
76-
golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec=
75+
golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=
76+
golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU=
7777
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
7878
golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
7979
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -101,8 +101,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa h1:
101101
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:q4lMZS6kskjT5HvCPrnnypcDPVJqT/f4nfxmkE7gryY=
102102
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk=
103103
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
104-
google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
105-
google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
104+
google.golang.org/grpc v1.82.0 h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU=
105+
google.golang.org/grpc v1.82.0/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
106106
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
107107
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
108108
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=

0 commit comments

Comments
 (0)