Skip to content

Commit 5fcfea3

Browse files
sandeepnRESsandeepnRES
committed
fix(weaver): address vulnerability CVE-2020-28477 and many others
 - https://github.com/hyperledger/cacti/security/dependabot/434 - https://github.com/hyperledger/cacti/security/dependabot/435 - https://github.com/hyperledger/cacti/security/dependabot/423 - https://github.com/hyperledger/cacti/security/dependabot/499 - https://github.com/hyperledger/cacti/security/dependabot/570 - https://github.com/hyperledger/cacti/security/dependabot/594 - https://github.com/hyperledger/cacti/security/dependabot/592 - https://github.com/hyperledger/cacti/security/dependabot/590 - https://github.com/hyperledger/cacti/security/dependabot/589 - https://github.com/hyperledger/cacti/security/dependabot/588 - https://github.com/hyperledger/cacti/security/dependabot/594 - https://github.com/hyperledger/cacti/security/dependabot/591 - Remove unwanted dependencies in `weaver-besu-sdk` Signed-off-by: Sandeep Nishad <[email protected]>
1 parent e251168 commit 5fcfea3

File tree

22 files changed

+918
-1618
lines changed

22 files changed

+918
-1618
lines changed

‎weaver/common/protos-rs/Cargo.lock

+136-115
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎weaver/common/protos-rs/Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,4 @@ tokio = { version = "1.27", features = ["macros", "fs"] }
1515
serde = {version="1.0.159", features = ["derive"]}
1616

1717
[build-dependencies]
18-
tonic-build = "0.8.3"
18+
tonic-build = "0.8.4"

‎weaver/core/network/fabric-interop-cc/contracts/interop/go.mod

+19-19
Original file line numberDiff line numberDiff line change
@@ -3,39 +3,39 @@ module github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/contra
33
go 1.20
44

55
require (
6-
github.com/ethereum/go-ethereum v1.10.17
7-
github.com/golang/protobuf v1.5.2
6+
github.com/ethereum/go-ethereum v1.11.5
7+
github.com/golang/protobuf v1.5.3
88
github.com/hyperledger/cacti/weaver/common/protos-go v1.5.7
99
github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/libs/assetexchange v1.5.8
1010
github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/libs/testutils v0.0.0-20220522111555-ae96e46bf4a1
1111
github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/libs/utils v1.5.6
12-
github.com/hyperledger/fabric-chaincode-go v0.0.0-20210718160520-38d29fabecb9
13-
github.com/hyperledger/fabric-contract-api-go v1.1.1
12+
github.com/hyperledger/fabric-chaincode-go v0.0.0-20230228194215-b84622ba6a7a
13+
github.com/hyperledger/fabric-contract-api-go v1.2.1
1414
github.com/hyperledger/fabric-protos-go v0.3.0
15-
github.com/sirupsen/logrus v1.8.1
16-
github.com/stretchr/testify v1.7.0
15+
github.com/sirupsen/logrus v1.9.0
16+
github.com/stretchr/testify v1.8.2
1717
golang.org/x/crypto v0.1.0
1818
google.golang.org/protobuf v1.30.0
1919
)
2020

2121
require (
22-
github.com/PuerkitoBio/purell v1.1.1 // indirect
23-
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
24-
github.com/btcsuite/btcd/btcec/v2 v2.1.2 // indirect
22+
github.com/btcsuite/btcd/btcec/v2 v2.2.0 // indirect
2523
github.com/davecgh/go-spew v1.1.1 // indirect
2624
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1 // indirect
2725
github.com/go-openapi/jsonpointer v0.19.5 // indirect
28-
github.com/go-openapi/jsonreference v0.19.2 // indirect
29-
github.com/go-openapi/spec v0.19.4 // indirect
30-
github.com/go-openapi/swag v0.19.5 // indirect
31-
github.com/gobuffalo/envy v1.7.0 // indirect
32-
github.com/gobuffalo/packd v0.3.0 // indirect
26+
github.com/go-openapi/jsonreference v0.20.0 // indirect
27+
github.com/go-openapi/spec v0.20.8 // indirect
28+
github.com/go-openapi/swag v0.21.1 // indirect
29+
github.com/gobuffalo/envy v1.10.1 // indirect
30+
github.com/gobuffalo/packd v1.0.1 // indirect
3331
github.com/gobuffalo/packr v1.30.1 // indirect
34-
github.com/joho/godotenv v1.3.0 // indirect
35-
github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e // indirect
32+
github.com/holiman/uint256 v1.2.0 // indirect
33+
github.com/joho/godotenv v1.4.0 // indirect
34+
github.com/josharian/intern v1.0.0 // indirect
35+
github.com/mailru/easyjson v0.7.7 // indirect
3636
github.com/pmezard/go-difflib v1.0.0 // indirect
37-
github.com/rogpeppe/go-internal v1.3.0 // indirect
38-
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
37+
github.com/rogpeppe/go-internal v1.9.0 // indirect
38+
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
3939
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
4040
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
4141
golang.org/x/net v0.8.0 // indirect
@@ -44,5 +44,5 @@ require (
4444
google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f // indirect
4545
google.golang.org/grpc v1.54.0 // indirect
4646
gopkg.in/yaml.v2 v2.4.0 // indirect
47-
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
47+
gopkg.in/yaml.v3 v3.0.1 // indirect
4848
)

‎weaver/core/network/fabric-interop-cc/contracts/interop/go.sum

+52-548
Large diffs are not rendered by default.

‎weaver/core/network/fabric-interop-cc/interfaces/asset-mgmt/go.mod

+18-23
Original file line numberDiff line numberDiff line change
@@ -3,32 +3,31 @@ module github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/interf
33
go 1.20
44

55
require (
6-
github.com/golang/protobuf v1.5.2
6+
github.com/golang/protobuf v1.5.3
77
github.com/hyperledger/cacti/weaver/common/protos-go v1.5.6
88
github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/libs/testutils v0.0.0-20210920170720-5d5bf2a54081
9-
github.com/hyperledger/fabric-chaincode-go v0.0.0-20210718160520-38d29fabecb9
10-
github.com/hyperledger/fabric-contract-api-go v1.1.1
9+
github.com/hyperledger/fabric-chaincode-go v0.0.0-20230228194215-b84622ba6a7a
10+
github.com/hyperledger/fabric-contract-api-go v1.2.1
1111
github.com/hyperledger/fabric-protos-go v0.3.0
12-
github.com/sirupsen/logrus v1.8.1
13-
github.com/stretchr/testify v1.7.0
12+
github.com/sirupsen/logrus v1.9.0
13+
github.com/stretchr/testify v1.8.2
1414
)
1515

1616
require (
17-
github.com/PuerkitoBio/purell v1.1.1 // indirect
18-
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
1917
github.com/davecgh/go-spew v1.1.1 // indirect
20-
github.com/go-openapi/jsonpointer v0.19.3 // indirect
21-
github.com/go-openapi/jsonreference v0.19.2 // indirect
22-
github.com/go-openapi/spec v0.19.4 // indirect
23-
github.com/go-openapi/swag v0.19.5 // indirect
24-
github.com/gobuffalo/envy v1.7.0 // indirect
25-
github.com/gobuffalo/packd v0.3.0 // indirect
18+
github.com/go-openapi/jsonpointer v0.19.5 // indirect
19+
github.com/go-openapi/jsonreference v0.20.0 // indirect
20+
github.com/go-openapi/spec v0.20.8 // indirect
21+
github.com/go-openapi/swag v0.21.1 // indirect
22+
github.com/gobuffalo/envy v1.10.1 // indirect
23+
github.com/gobuffalo/packd v1.0.1 // indirect
2624
github.com/gobuffalo/packr v1.30.1 // indirect
27-
github.com/joho/godotenv v1.3.0 // indirect
28-
github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e // indirect
25+
github.com/joho/godotenv v1.4.0 // indirect
26+
github.com/josharian/intern v1.0.0 // indirect
27+
github.com/mailru/easyjson v0.7.7 // indirect
2928
github.com/pmezard/go-difflib v1.0.0 // indirect
30-
github.com/rogpeppe/go-internal v1.3.0 // indirect
31-
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
29+
github.com/rogpeppe/go-internal v1.8.1 // indirect
30+
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
3231
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
3332
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
3433
golang.org/x/net v0.8.0 // indirect
@@ -37,10 +36,6 @@ require (
3736
google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f // indirect
3837
google.golang.org/grpc v1.54.0 // indirect
3938
google.golang.org/protobuf v1.30.0 // indirect
40-
gopkg.in/yaml.v2 v2.2.8 // indirect
41-
gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776 // indirect
39+
gopkg.in/yaml.v2 v2.4.0 // indirect
40+
gopkg.in/yaml.v3 v3.0.1 // indirect
4241
)
43-
44-
replace github.com/hyperledger/cacti/weaver/common/protos-go => ../../../../../common/protos-go/
45-
46-
replace github.com/hyperledger/cacti/weaver/core/network/fabric-interop-cc/libs/testutils => ../../libs/testutils/

0 commit comments

Comments
 (0)