From 84ddebb2100f543fbbcf5c08413777a96cfa9b58 Mon Sep 17 00:00:00 2001 From: Sebastian Serth Date: Tue, 16 Aug 2022 11:04:39 +0200 Subject: [PATCH] Pin Nomad's dependency to resolve security issues and easy dependecy upgrade process --- go.mod | 9 ++++++++- go.sum | 2 +- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index 686396f..e25bcf0 100644 --- a/go.mod +++ b/go.mod @@ -16,6 +16,13 @@ require ( gopkg.in/yaml.v3 v3.0.1 ) +replace ( + // Consul is used by Nomad, but rather in an old version v1.7.8 with security issues. + github.com/hashicorp/consul => github.com/hashicorp/consul v1.13.1 + // Nomad is not compatible with newer versions of HCLv2 yet. + github.com/hashicorp/hcl/v2 => github.com/hashicorp/hcl/v2 v2.9.2-0.20220525143345-ab3cae0737bc +) + require ( github.com/agext/levenshtein v1.2.3 // indirect github.com/apparentlymart/go-cidr v1.1.0 // indirect @@ -52,7 +59,7 @@ require ( github.com/hashicorp/go-version v1.6.0 // indirect github.com/hashicorp/golang-lru v0.5.4 // indirect github.com/hashicorp/hcl v1.0.1-vault-3 // indirect - github.com/hashicorp/hcl/v2 v2.9.2-0.20220525143345-ab3cae0737bc // indirect + github.com/hashicorp/hcl/v2 v2.13.0 // indirect github.com/hashicorp/raft v1.3.10 // indirect github.com/hashicorp/serf v0.10.0 // indirect github.com/hashicorp/vault/api v1.7.2 // indirect diff --git a/go.sum b/go.sum index f7c9b7a..5329ff6 100644 --- a/go.sum +++ b/go.sum @@ -146,7 +146,7 @@ github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB7 github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc= github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= -github.com/hashicorp/consul v1.7.8 h1:hp308KxAf3zWoGuwp2e+0UUhrm6qHjeBQk3jCZ+bjcY= +github.com/hashicorp/consul v1.13.1 h1:N3tcYFvhimxwfk3esGNJKAVkcA5LFxtbg4+/z4J9oTw= github.com/hashicorp/consul/api v1.14.0 h1:Y64GIJ8hYTu+tuGekwO4G4ardXoiCivX9wv1iP/kihk= github.com/hashicorp/consul/api v1.14.0/go.mod h1:bcaw5CSZ7NE9qfOfKCI1xb7ZKjzu/MyvQkCLTfqLqxQ= github.com/hashicorp/consul/sdk v0.10.0 h1:rGLEh2AWK4K0KCMvqWAz2EYxQqgciIfMagWZ0nVe5MI=