Skip to content

Commit 9a7e176

Browse files
codebotenFiery-Fenix
authored andcommitted
[chore] bump oauth dep (open-telemetry#38867)
This old version of oauth2 has known vulnerabilities, this addresses them. Signed-off-by: Alex Boten <[email protected]>
1 parent b5e1499 commit 9a7e176

File tree

52 files changed

+98
-86
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

52 files changed

+98
-86
lines changed

exporter/googlecloudexporter/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ require (
8181
go.uber.org/zap v1.27.0 // indirect
8282
golang.org/x/crypto v0.36.0 // indirect
8383
golang.org/x/net v0.37.0 // indirect
84-
golang.org/x/oauth2 v0.25.0 // indirect
84+
golang.org/x/oauth2 v0.28.0 // indirect
8585
golang.org/x/sync v0.12.0 // indirect
8686
golang.org/x/sys v0.31.0 // indirect
8787
golang.org/x/text v0.23.0 // indirect

exporter/googlecloudexporter/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

exporter/googlemanagedprometheusexporter/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@ require (
144144
golang.org/x/crypto v0.36.0 // indirect
145145
golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 // indirect
146146
golang.org/x/net v0.37.0 // indirect
147-
golang.org/x/oauth2 v0.26.0 // indirect
147+
golang.org/x/oauth2 v0.28.0 // indirect
148148
golang.org/x/sync v0.12.0 // indirect
149149
golang.org/x/sys v0.31.0 // indirect
150150
golang.org/x/text v0.23.0 // indirect

exporter/googlemanagedprometheusexporter/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

exporter/loadbalancingexporter/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -172,7 +172,7 @@ require (
172172
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
173173
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
174174
golang.org/x/net v0.37.0 // indirect
175-
golang.org/x/oauth2 v0.26.0 // indirect
175+
golang.org/x/oauth2 v0.28.0 // indirect
176176
golang.org/x/sys v0.31.0 // indirect
177177
golang.org/x/term v0.30.0 // indirect
178178
golang.org/x/text v0.23.0 // indirect

exporter/loadbalancingexporter/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

exporter/pulsarexporter/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@ require (
9999
go.uber.org/atomic v1.11.0 // indirect
100100
golang.org/x/mod v0.20.0 // indirect
101101
golang.org/x/net v0.37.0 // indirect
102-
golang.org/x/oauth2 v0.25.0 // indirect
102+
golang.org/x/oauth2 v0.28.0 // indirect
103103
golang.org/x/sys v0.31.0 // indirect
104104
golang.org/x/term v0.30.0 // indirect
105105
golang.org/x/text v0.23.0 // indirect

exporter/pulsarexporter/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

extension/googleclientauthextension/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ require (
4949
go.uber.org/zap v1.27.0 // indirect
5050
golang.org/x/crypto v0.36.0 // indirect
5151
golang.org/x/net v0.37.0 // indirect
52-
golang.org/x/oauth2 v0.25.0 // indirect
52+
golang.org/x/oauth2 v0.28.0 // indirect
5353
golang.org/x/sys v0.31.0 // indirect
5454
golang.org/x/text v0.23.0 // indirect
5555
google.golang.org/api v0.216.0 // indirect

extension/googleclientauthextension/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

extension/k8sleaderelector/go.mod

+4-1
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ require (
6161
go.opentelemetry.io/otel/trace v1.35.0 // indirect
6262
go.uber.org/multierr v1.11.0 // indirect
6363
golang.org/x/net v0.37.0 // indirect
64-
golang.org/x/oauth2 v0.25.0 // indirect
64+
golang.org/x/oauth2 v0.28.0 // indirect
6565
golang.org/x/sys v0.31.0 // indirect
6666
golang.org/x/term v0.30.0 // indirect
6767
golang.org/x/text v0.23.0 // indirect
@@ -81,3 +81,6 @@ require (
8181
)
8282

8383
replace github.com/open-telemetry/opentelemetry-collector-contrib/internal/k8sconfig => ../../internal/k8sconfig
84+
85+
// openshift removed all tags from their repo, use the pseudoversion from the release-3.9 branch HEAD
86+
replace github.com/openshift/api v3.9.0+incompatible => github.com/openshift/api v0.0.0-20180801171038-322a19404e37

extension/k8sleaderelector/go.sum

+4-4
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

extension/observer/k8sobserver/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ require (
6363
go.opentelemetry.io/otel/trace v1.35.0 // indirect
6464
go.uber.org/multierr v1.11.0 // indirect
6565
golang.org/x/net v0.37.0 // indirect
66-
golang.org/x/oauth2 v0.25.0 // indirect
66+
golang.org/x/oauth2 v0.28.0 // indirect
6767
golang.org/x/sys v0.31.0 // indirect
6868
golang.org/x/term v0.30.0 // indirect
6969
golang.org/x/text v0.23.0 // indirect

extension/observer/k8sobserver/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

internal/aws/k8s/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ require (
3939
github.com/x448/float16 v0.8.4 // indirect
4040
go.uber.org/multierr v1.11.0 // indirect
4141
golang.org/x/net v0.37.0 // indirect
42-
golang.org/x/oauth2 v0.24.0 // indirect
42+
golang.org/x/oauth2 v0.28.0 // indirect
4343
golang.org/x/sys v0.31.0 // indirect
4444
golang.org/x/term v0.30.0 // indirect
4545
golang.org/x/text v0.23.0 // indirect

internal/aws/k8s/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

internal/datadog/go.mod

+4-1
Original file line numberDiff line numberDiff line change
@@ -161,7 +161,7 @@ require (
161161
go.uber.org/multierr v1.11.0 // indirect
162162
golang.org/x/exp v0.0.0-20250210185358-939b2ce775ac // indirect
163163
golang.org/x/net v0.37.0 // indirect
164-
golang.org/x/oauth2 v0.25.0 // indirect
164+
golang.org/x/oauth2 v0.28.0 // indirect
165165
golang.org/x/sys v0.31.0 // indirect
166166
golang.org/x/term v0.30.0 // indirect
167167
golang.org/x/text v0.23.0 // indirect
@@ -189,3 +189,6 @@ replace github.com/open-telemetry/opentelemetry-collector-contrib/internal/metad
189189
replace github.com/open-telemetry/opentelemetry-collector-contrib/internal/k8sconfig => ../k8sconfig
190190

191191
replace github.com/open-telemetry/opentelemetry-collector-contrib/internal/aws/ecsutil => ../aws/ecsutil
192+
193+
// openshift removed all tags from their repo, use the pseudoversion from the release-3.9 branch HEAD
194+
replace github.com/openshift/api v3.9.0+incompatible => github.com/openshift/api v0.0.0-20180801171038-322a19404e37

internal/datadog/go.sum

+4-4
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

internal/k8sconfig/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ require (
3535
github.com/stretchr/testify v1.10.0 // indirect
3636
github.com/x448/float16 v0.8.4 // indirect
3737
golang.org/x/net v0.37.0 // indirect
38-
golang.org/x/oauth2 v0.24.0 // indirect
38+
golang.org/x/oauth2 v0.28.0 // indirect
3939
golang.org/x/sys v0.31.0 // indirect
4040
golang.org/x/term v0.30.0 // indirect
4141
golang.org/x/text v0.23.0 // indirect

internal/k8sconfig/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

internal/kubelet/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ require (
4242
go.opentelemetry.io/collector/config/configopaque v1.28.2-0.20250319144947-41a9ea7f7402 // indirect
4343
go.uber.org/multierr v1.11.0 // indirect
4444
golang.org/x/net v0.37.0 // indirect
45-
golang.org/x/oauth2 v0.24.0 // indirect
45+
golang.org/x/oauth2 v0.28.0 // indirect
4646
golang.org/x/sys v0.31.0 // indirect
4747
golang.org/x/term v0.30.0 // indirect
4848
golang.org/x/text v0.23.0 // indirect

internal/kubelet/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

internal/metadataproviders/go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ require (
8888
go.opentelemetry.io/otel/trace v1.35.0 // indirect
8989
golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 // indirect
9090
golang.org/x/net v0.37.0 // indirect
91-
golang.org/x/oauth2 v0.24.0 // indirect
91+
golang.org/x/oauth2 v0.28.0 // indirect
9292
golang.org/x/sys v0.31.0 // indirect
9393
golang.org/x/term v0.30.0 // indirect
9494
golang.org/x/text v0.23.0 // indirect

internal/metadataproviders/go.sum

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)