Merge pull request #129 from RasaHQ/ci/fix-security-issues

Resolve Security Issues Identified By Snyk
RasaHQ · Mar 23, 2023 · d6117c5 · d6117c5
2 parents 089fad6 + 7f8c2a0
commit d6117c5
Show file tree

Hide file tree

Showing 11 changed files with 25 additions and 22 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -96,7 +96,7 @@ jobs:
 
       - uses: actions/setup-go@v2
         with:
-          go-version: '^1.16.5'
+          go-version: '^1.20.2'
 
       - name: Download dependencies
         working-directory: ${{ matrix.test }}
@@ -109,7 +109,10 @@ jobs:
 
       - name: Run tests
         working-directory: ${{ matrix.test }}
-        run: go test -v
+        run: |
+          helm repo add rasa https://helm.rasa.com
+          go mod tidy
+          go test -v
 
   kubeval-chart:
     runs-on: ubuntu-22.04

diff --git a/charts/duckling/Chart.lock b/charts/duckling/Chart.lock
@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.rasa.com
   version: 1.0.2
 digest: sha256:2154e90d996acc784ae39b3780476a9eaa725197d793579f92e52312f9abd0d6
-generated: "2022-04-07T11:52:09.622191+02:00"
+generated: "2023-03-23T18:06:41.63237+01:00"
diff --git a/charts/duckling/Chart.yaml b/charts/duckling/Chart.yaml
@@ -13,7 +13,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.1.4
+version: 1.1.5
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.

diff --git a/charts/duckling/test/go.mod b/charts/duckling/test/go.mod
@@ -1,10 +1,10 @@
 module github.com/RasaHQ/helm-charts/charts/duckling
 
-go 1.16
+go 1.20
 
 require (
-	github.com/gruntwork-io/terratest v0.35.6
-	github.com/stretchr/testify v1.4.0 // indirect
+	github.com/gruntwork-io/terratest v0.39.0
+	github.com/stretchr/testify v1.6.0 // indirect
 	k8s.io/api v0.19.3
 	k8s.io/apimachinery v0.19.3
 	k8s.io/client-go v0.19.3

diff --git a/charts/rasa-action-server/Chart.lock b/charts/rasa-action-server/Chart.lock
@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.rasa.com
   version: 1.0.2
 digest: sha256:2154e90d996acc784ae39b3780476a9eaa725197d793579f92e52312f9abd0d6
-generated: "2023-03-21T10:47:50.140514+01:00"
+generated: "2023-03-23T18:07:53.087818+01:00"
diff --git a/charts/rasa-action-server/Chart.yaml b/charts/rasa-action-server/Chart.yaml
@@ -14,7 +14,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.6
+version: 1.0.7
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.

diff --git a/charts/rasa-action-server/test/go.mod b/charts/rasa-action-server/test/go.mod
@@ -1,10 +1,10 @@
 module github.com/RasaHQ/helm-charts/charts/rasa-action-server
 
-go 1.16
+go 1.20
 
 require (
-	github.com/gruntwork-io/terratest v0.35.6
-	github.com/stretchr/testify v1.4.0 // indirect
+	github.com/gruntwork-io/terratest v0.39.0
+	github.com/stretchr/testify v1.6.0 // indirect
 	k8s.io/api v0.19.3
 	k8s.io/apimachinery v0.19.3
 	k8s.io/client-go v0.19.3

diff --git a/charts/rasa/Chart.lock b/charts/rasa/Chart.lock
@@ -13,9 +13,9 @@ dependencies:
   version: 8.32.2
 - name: rasa-action-server
   repository: https://helm.rasa.com
-  version: 1.0.5
+  version: 1.0.6
 - name: duckling
   repository: https://helm.rasa.com
   version: 1.1.4
-digest: sha256:6fca88fb2f77f0c0483574aa26cc07b1d334cbe9326d34fbe201328e6bf254b2
-generated: "2023-03-21T10:46:45.216128+01:00"
+digest: sha256:9fb676619248bf47c1bf845bfa962a59366c2d5f65aa3a44e48c16561963bced
+generated: "2023-03-23T18:07:17.042872+01:00"
diff --git a/charts/rasa/Chart.yaml b/charts/rasa/Chart.yaml
@@ -13,7 +13,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.17.5
+version: 1.17.6
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.

diff --git a/charts/rasa/test/go.mod b/charts/rasa/test/go.mod
@@ -1,10 +1,10 @@
 module github.com/RasaHQ/helm-charts/charts/rasa
 
-go 1.16
+go 1.20
 
 require (
-	github.com/gruntwork-io/terratest v0.35.6
-	github.com/stretchr/testify v1.4.0 // indirect
+	github.com/gruntwork-io/terratest v0.39.0
+	github.com/stretchr/testify v1.6.0 // indirect
 	k8s.io/api v0.19.3
 	k8s.io/apimachinery v0.19.3
 	k8s.io/client-go v0.19.3

diff --git a/test/common/go.mod b/test/common/go.mod
@@ -1,10 +1,10 @@
 module github.com/RasaHQ/helm-charts
 
-go 1.16
+go 1.20
 
 require (
-	github.com/gruntwork-io/terratest v0.35.6
-	github.com/stretchr/testify v1.4.0 // indirect
+	github.com/gruntwork-io/terratest v0.39.0
+	github.com/stretchr/testify v1.6.0 // indirect
 	k8s.io/api v0.19.3
 	k8s.io/apimachinery v0.19.3
 	k8s.io/client-go v0.19.3