Pin Nomad's dependency to resolve security issues and easy dependecy upgrade process

This commit is contained in:
Sebastian Serth
2022-08-16 11:04:39 +02:00
committed by Sebastian Serth
parent a5dc414b77
commit 84ddebb210
2 changed files with 9 additions and 2 deletions

9
go.mod
View File

@ -16,6 +16,13 @@ require (
gopkg.in/yaml.v3 v3.0.1
)
replace (
// Consul is used by Nomad, but rather in an old version v1.7.8 with security issues.
github.com/hashicorp/consul => github.com/hashicorp/consul v1.13.1
// Nomad is not compatible with newer versions of HCLv2 yet.
github.com/hashicorp/hcl/v2 => github.com/hashicorp/hcl/v2 v2.9.2-0.20220525143345-ab3cae0737bc
)
require (
github.com/agext/levenshtein v1.2.3 // indirect
github.com/apparentlymart/go-cidr v1.1.0 // indirect
@ -52,7 +59,7 @@ require (
github.com/hashicorp/go-version v1.6.0 // indirect
github.com/hashicorp/golang-lru v0.5.4 // indirect
github.com/hashicorp/hcl v1.0.1-vault-3 // indirect
github.com/hashicorp/hcl/v2 v2.9.2-0.20220525143345-ab3cae0737bc // indirect
github.com/hashicorp/hcl/v2 v2.13.0 // indirect
github.com/hashicorp/raft v1.3.10 // indirect
github.com/hashicorp/serf v0.10.0 // indirect
github.com/hashicorp/vault/api v1.7.2 // indirect

2
go.sum
View File

@ -146,7 +146,7 @@ github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB7
github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
github.com/hashicorp/consul v1.7.8 h1:hp308KxAf3zWoGuwp2e+0UUhrm6qHjeBQk3jCZ+bjcY=
github.com/hashicorp/consul v1.13.1 h1:N3tcYFvhimxwfk3esGNJKAVkcA5LFxtbg4+/z4J9oTw=
github.com/hashicorp/consul/api v1.14.0 h1:Y64GIJ8hYTu+tuGekwO4G4ardXoiCivX9wv1iP/kihk=
github.com/hashicorp/consul/api v1.14.0/go.mod h1:bcaw5CSZ7NE9qfOfKCI1xb7ZKjzu/MyvQkCLTfqLqxQ=
github.com/hashicorp/consul/sdk v0.10.0 h1:rGLEh2AWK4K0KCMvqWAz2EYxQqgciIfMagWZ0nVe5MI=