From 32cb322551a4176a268768219a5df7eddcb27e09 Mon Sep 17 00:00:00 2001 From: Scott Minor Date: Fri, 26 Jul 2024 15:10:17 -0400 Subject: [PATCH] dependencies: Import urfave/cli/v2 (#5) This change adds the latest version of `urfave/cli` and its transitive dependencies to `go.mod` for use in future PRs; it is split from changes that use it so that the dependency addition can be reviewed in isolation. A previous effort was made to import this library into the internal repository, although this effort imported an old (v1.x) version, and therefore security reviews on the set of transitive dependencies are incomplete: Previously completed security reviews: - [github.com/cpuguy83/go-md2man/v2](https://docs.google.com/spreadsheets/d/1v207mMq486sc5043ySIcg8ri-ahP4vFxCOxoMUQnAg4/edit?gid=0#gid=0) - [github.com/russross/blackfriday/v2](https://docs.google.com/spreadsheets/d/1FfVS81kN-5XV6yGrcxdRDSZaGAVobG5hADeYh0OqnOE/edit?gid=0#gid=0) - [github.com/urfave/cli/v2](https://docs.google.com/spreadsheets/d/1Ag1tcVQbtHIE7xZfAhN1M4d43fBM2sgSt8mG3bfU5_I/edit?gid=0#gid=0) New security reviews: - [github.com/xrash/smetrics](https://docs.google.com/spreadsheets/d/1vR9MFsMDY3wy2MNj9ljwgkuFY8hFYy5d_BxjggQ8FHg/edit?gid=0#gid=0) Bug: linear/PE-2802 --- go.mod | 4 ++++ go.sum | 8 ++++++++ 2 files changed, 12 insertions(+) diff --git a/go.mod b/go.mod index 90eee61..ded146a 100644 --- a/go.mod +++ b/go.mod @@ -13,10 +13,14 @@ require ( require ( github.com/alessio/shellescape v1.4.2 // indirect + github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect github.com/danieljoos/wincred v1.2.0 // indirect github.com/davecgh/go-spew v1.1.1 // indirect github.com/godbus/dbus/v5 v5.1.0 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect + github.com/russross/blackfriday/v2 v2.1.0 // indirect + github.com/urfave/cli/v2 v2.27.2 // indirect + github.com/xrash/smetrics v0.0.0-20240312152122-5f08fbb34913 // indirect golang.org/x/sys v0.8.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect ) diff --git a/go.sum b/go.sum index 9fd0f43..ba53fb8 100644 --- a/go.sum +++ b/go.sum @@ -2,6 +2,8 @@ github.com/EngFlow/credential-helper-go v0.0.0-20240531061116-25d7df71cdb6 h1:kf github.com/EngFlow/credential-helper-go v0.0.0-20240531061116-25d7df71cdb6/go.mod h1:n8mVwofIoRWjWa+0p/kfKjGo9bHGQb6zfcJuO+Kob6o= github.com/alessio/shellescape v1.4.2 h1:MHPfaU+ddJ0/bYWpgIeUnQUqKrlJ1S7BfEYPM4uEoM0= github.com/alessio/shellescape v1.4.2/go.mod h1:PZAiSCk0LJaZkiCSkPv8qIobYglO3FPpyFjDCtHLS30= +github.com/cpuguy83/go-md2man/v2 v2.0.4 h1:wfIWP927BUkWJb2NmU/kNDYIBTh/ziUX91+lVfRxZq4= +github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= github.com/danieljoos/wincred v1.2.0 h1:ozqKHaLK0W/ii4KVbbvluM91W2H3Sh0BncbUNPS7jLE= github.com/danieljoos/wincred v1.2.0/go.mod h1:FzQLLMKBFdvu+osBrnFODiv32YGwCfx0SkRa/eYHgec= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= @@ -16,10 +18,16 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk= +github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY= github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/urfave/cli/v2 v2.27.2 h1:6e0H+AkS+zDckwPCUrZkKX38mRaau4nL2uipkJpbkcI= +github.com/urfave/cli/v2 v2.27.2/go.mod h1:g0+79LmHHATl7DAcHO99smiR/T7uGLw84w8Y42x+4eM= +github.com/xrash/smetrics v0.0.0-20240312152122-5f08fbb34913 h1:+qGGcbkzsfDQNPPe9UDgpxAWQrhbbBXOYJFQDq/dtJw= +github.com/xrash/smetrics v0.0.0-20240312152122-5f08fbb34913/go.mod h1:4aEEwZQutDLsQv2Deui4iYQ6DWTxR14g6m8Wv88+Xqk= github.com/zalando/go-keyring v0.2.5 h1:Bc2HHpjALryKD62ppdEzaFG6VxL6Bc+5v0LYpN8Lba8= github.com/zalando/go-keyring v0.2.5/go.mod h1:HL4k+OXQfJUWaMnqyuSOc0drfGPX2b51Du6K+MRgZMk= golang.org/x/oauth2 v0.20.0 h1:4mQdhULixXKP1rwYBW0vAijoXnkTG0BLCDRzfe1idMo=