Merge pull request #1519 from TheoBrigitte/CVE-2024-2660

Fix CVE-2024-2660

go.mod

@@ -1,6 +1,6 @@
 module github.com/getsops/sops/v3
 
-go 1.19
+go 1.21
 
 require (
  cloud.google.com/go/kms v1.15.7
@@ -25,7 +25,7 @@ require (
  github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
  github.com/goware/prefixer v0.0.0-20160118172347-395022866408
  github.com/hashicorp/go-cleanhttp v0.5.2
- github.com/hashicorp/vault/api v1.12.0
+ github.com/hashicorp/vault/api v1.14.0
  github.com/lib/pq v1.10.9
  github.com/mitchellh/go-homedir v1.1.0
  github.com/mitchellh/go-wordwrap v1.0.1
@@ -34,9 +34,9 @@ require (
  github.com/sirupsen/logrus v1.9.3
  github.com/stretchr/testify v1.8.4
  github.com/urfave/cli v1.22.14
- golang.org/x/net v0.23.0
- golang.org/x/sys v0.18.0
- golang.org/x/term v0.18.0
+ golang.org/x/net v0.25.0
+ golang.org/x/sys v0.20.0
+ golang.org/x/term v0.20.0
  google.golang.org/api v0.165.0
  google.golang.org/genproto/googleapis/rpc v0.0.0-20240213162025-012b6fc9bca9
  google.golang.org/grpc v1.61.1
@@ -80,7 +80,7 @@ require (
  github.com/docker/go-connections v0.4.0 // indirect
  github.com/docker/go-units v0.4.0 // indirect
  github.com/felixge/httpsnoop v1.0.4 // indirect
- github.com/go-jose/go-jose/v3 v3.0.3 // indirect
+ github.com/go-jose/go-jose/v4 v4.0.2 // indirect
  github.com/go-logr/logr v1.4.1 // indirect
  github.com/go-logr/stdr v1.2.2 // indirect
  github.com/gogo/protobuf v1.3.2 // indirect
@@ -91,9 +91,8 @@ require (
  github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
  github.com/googleapis/gax-go/v2 v2.12.1 // indirect
  github.com/hashicorp/errwrap v1.1.0 // indirect
- github.com/hashicorp/go-hclog v1.2.1 // indirect
  github.com/hashicorp/go-multierror v1.1.1 // indirect
- github.com/hashicorp/go-retryablehttp v0.7.5 // indirect
+ github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
  github.com/hashicorp/go-rootcerts v1.0.2 // indirect
  github.com/hashicorp/go-secure-stdlib/parseutil v0.1.8 // indirect
  github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
@@ -124,11 +123,11 @@ require (
  go.opentelemetry.io/otel v1.23.1 // indirect
  go.opentelemetry.io/otel/metric v1.23.1 // indirect
  go.opentelemetry.io/otel/trace v1.23.1 // indirect
- golang.org/x/crypto v0.21.0 // indirect
+ golang.org/x/crypto v0.23.0 // indirect
  golang.org/x/mod v0.9.0 // indirect
  golang.org/x/oauth2 v0.17.0 // indirect
  golang.org/x/sync v0.6.0 // indirect
- golang.org/x/text v0.14.0 // indirect
+ golang.org/x/text v0.15.0 // indirect
  golang.org/x/time v0.5.0 // indirect
  golang.org/x/tools v0.7.0 // indirect
  google.golang.org/appengine v1.6.8 // indirect