Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: update dependencies to supported versions #369

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

clambin
Copy link

@clambin clambin commented Apr 1, 2024

I noticed that some of the underlying dependencies are quite old, and in some cases deprecated or had security issues.

Main updates in this PR:

  • Bump github.com/coreos/go-oidc to v3
  • Bump gopkg.in/square/go-jose.v2 (deprecated; security issues) to github.com/go-jose/go-jose/v4
  • Bump github.com/traefik/traefik/v2 to v2.11.0 (some changes in API needed)

Some minor updates:

  • Go 1.22.1
  • Bump github.com/sirupsen/logrus to v1.9.3
  • Bump github.com/stretchr/testify to v1.9.0
  • Bump golang.org/x/oauth2 to v0.18.0

@j6b72
Copy link

j6b72 commented Apr 30, 2024

Thank you for your work! I hope this gets merged soon...

@clambin
Copy link
Author

clambin commented May 2, 2024

@j6b72: thanks! it's not looking good though, is it? :)

tbh, running 3y old security components made me a bit nervous, so I wrote my own version of this: https://github.com/clambin/traefik-simple-auth. I only covered the things I need, and not looking to support a big user base. But if you want, feel free to give it a try.

@toxic0berliner
Copy link

I fear as you it's safer to turn to something else. I picked authelia and am happy with it if that helps others choose

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants