Skip to content

Conversation

@ItalyPaleAle
Copy link

@ItalyPaleAle ItalyPaleAle commented Feb 2, 2023

We use this library in Dapr and we noticed that was depending on outdated dependencies, including some like github.com/satori/go.uuid which had security vulnerabilities.

Hopefully this upgraded most dependencies (not all - I can't easily upgrade protobufs to the new package).

Note: It now requires Go 1.18+

PS: I cannot run tests because I don't have an Alicloud account. Please let me know how I can run tests, since Travis doesn't seem to be working?

@CLAassistant
Copy link

CLAassistant commented Feb 2, 2023

CLA assistant check
All committers have signed the CLA.

@Actimermao
Copy link
Contributor

We use this library in Dapr and we noticed that was depending on outdated dependencies, including some like github.com/satori/go.uuid which had security vulnerabilities.

Hopefully this upgraded most dependencies (not all - I can't easily upgrade protobufs to the new package).

Note: It now requires Go 1.18+

PS: I cannot run tests because I don't have an Alicloud account. Please let me know how I can run tests, since Travis doesn't seem to be working?

First of all, thanks for your advice. In view of stability and our internal open source process, we have released a pre-release version of v1.8.0-rc.1 using go 1.18 that you can try out first

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants