curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
cloudflared-mirror/go.mod

106 lines
4.5 KiB
Modula-2
Raw Normal View History

TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
module github.com/cloudflare/cloudflared
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
go 1.22
TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
require (
TUN-7066: Bump coredns to v1.10.0 closes #857
2023-01-11 00:12:59 +00:00
github.com/coredns/coredns v1.10.0
TUN-8333: Bump go-jose dependency to v4
2024-04-03 20:19:12 +00:00
github.com/coreos/go-oidc/v3 v3.10.0
TUN-7588: Update package coreos/go-systemd
2023-07-14 23:26:27 +00:00
github.com/coreos/go-systemd/v22 v22.5.0
TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
github.com/facebookgo/grace v0.0.0-20180706040059-75cf19382434
TUN-8333: Bump go-jose dependency to v4
2024-04-03 20:19:12 +00:00
github.com/fortytw2/leaktest v1.3.0
AUTH-2587 add config watcher and reload logic for access client forwarder
2020-04-13 17:22:00 +00:00
github.com/fsnotify/fsnotify v1.4.9
TUN-6724: Migrate to sentry-go from raven-go
2022-12-25 04:44:15 +00:00
github.com/getsentry/sentry-go v0.16.0
TUN-7124: Add intercept ingress rule for management requests
2023-03-21 18:42:25 +00:00
github.com/go-chi/chi/v5 v5.0.8
TUN-7551: Complete removal of raven-go to sentry-go Removes the final usage of raven-go and removes the dependency.
2023-06-30 21:11:55 +00:00
github.com/go-chi/cors v1.2.1
TUN-8333: Bump go-jose dependency to v4
2024-04-03 20:19:12 +00:00
github.com/go-jose/go-jose/v4 v4.0.1
TUN-3403: Unit test for origin/proxy to test serving HTTP and Websocket
2020-10-20 15:26:55 +00:00
github.com/gobwas/ws v1.0.4
TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
github.com/golang-collections/collections v0.0.0-20130729185459-604e922904d3
RTG-1339 Support post-quantum hybrid key exchange Func spec: https://wiki.cfops.it/x/ZcBKHw
2022-08-24 12:33:10 +00:00
github.com/google/gopacket v1.1.19
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
github.com/google/uuid v1.6.0
TUN-3375: Upgrade x/text and gorilla websocket deps
2020-09-09 17:07:35 +00:00
github.com/gorilla/websocket v1.4.2
TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
2022-01-25 13:15:24 +00:00
github.com/json-iterator/go v1.1.12
TUN-6724: Migrate to sentry-go from raven-go
2022-12-25 04:44:15 +00:00
github.com/mattn/go-colorable v0.1.13
TUN-7066: Bump coredns to v1.10.0 closes #857
2023-01-11 00:12:59 +00:00
github.com/miekg/dns v1.1.50
TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
github.com/mitchellh/go-homedir v1.1.0
TUN-3375: Upgrade coredns and prometheus dependencies
2020-09-09 18:09:42 +00:00
github.com/pkg/errors v0.9.1
TUN-7066: Bump coredns to v1.10.0 closes #857
2023-01-11 00:12:59 +00:00
github.com/prometheus/client_golang v1.13.0
TUN-4922: Downgrade quic-go library to 0.20.0
2021-08-13 14:45:13 +00:00
github.com/prometheus/client_model v0.2.0
TUN-8371: Bump quic-go to v0.42.0 ## Summary We discovered that we were being impacted by a bug in quic-go, that could create deadlocks and not close connections. This commit bumps quic-go to the version that contains the fix to prevent that from happening.
2024-04-18 17:26:01 +00:00
github.com/quic-go/quic-go v0.42.0
TUN-3470: Replace in-house logger calls with zerolog
2020-11-25 06:55:13 +00:00
github.com/rs/zerolog v1.20.0
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
github.com/stretchr/testify v1.9.0
TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
2022-01-25 13:15:24 +00:00
github.com/urfave/cli/v2 v2.3.0
TUN-5989: Add in-memory otlp exporter
2022-04-06 23:20:29 +00:00
go.opentelemetry.io/contrib/propagators v0.22.0
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
go.opentelemetry.io/otel v1.26.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.26.0
go.opentelemetry.io/otel/sdk v1.26.0
go.opentelemetry.io/otel/trace v1.26.0
go.opentelemetry.io/proto/otlp v1.2.0
TUN-4356: Set AUTOMAXPROCS to the CPU limit when running in a Linux container
2021-05-06 17:22:43 +00:00
go.uber.org/automaxprocs v1.4.0
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
golang.org/x/crypto v0.23.0
golang.org/x/net v0.25.0
golang.org/x/sync v0.6.0
golang.org/x/sys v0.20.0
golang.org/x/term v0.20.0
google.golang.org/protobuf v1.34.1
TUN-3472: Set up rolling logger with zerolog and lumberjack
2020-12-02 20:58:17 +00:00
gopkg.in/natefinch/lumberjack.v2 v2.0.0
TUN-6293: Update yaml v3 to latest hotfix This addresses https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2841557 by updating yaml v3 to latest version. It also stops using yaml v2 directly (we were using both v2 and v3 mixed). We still rely on yaml v2 indirectly, via urfave cli, though. Note that the security vulnerability does not affect v2.
2022-05-30 15:19:51 +00:00
gopkg.in/yaml.v3 v3.0.1
TUN-7125: Add management streaming logs WebSocket protocol
2023-04-04 22:45:32 +00:00
nhooyr.io/websocket v1.8.7
TUN-3019: Remove declarative tunnel entry code
2020-05-29 09:21:03 +00:00
zombiezen.com/go/capnproto2 v2.18.0+incompatible
TUN-2502: Switch to go modules
2019-11-04 20:28:48 +00:00
)
TUN-3963: Repoint urfave/cli/v2 library at patched branch at github.com/ipostelnik/cli/v2@fixed which correctly handles reading flags declared at multiple levels of subcommands.
2021-02-23 19:48:32 +00:00
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
require (
TUN-6724: Migrate to sentry-go from raven-go
2022-12-25 04:44:15 +00:00
github.com/BurntSushi/toml v1.2.0 // indirect
TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
2022-01-25 13:15:24 +00:00
github.com/apparentlymart/go-cidr v1.1.0 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/beorn7/perks v1.0.1 // indirect
TUN-8052: Update go to 1.21.5 Also update golang.org/x/net and google.golang.org/grpc to fix vulnerabilities, although cloudflared is using them in a way that is not exposed to those risks
2023-12-11 11:58:19 +00:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
2022-01-25 13:15:24 +00:00
github.com/coredns/caddy v1.1.1 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/cpuguy83/go-md2man/v2 v2.0.0 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/facebookgo/ensure v0.0.0-20160127193407-b4ab57deab51 // indirect
github.com/facebookgo/freeport v0.0.0-20150612182905-d4adf43b75b9 // indirect
github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 // indirect
github.com/facebookgo/subset v0.0.0-20150612182917-8dac2c3c4870 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
github.com/go-logr/logr v1.4.1 // indirect
TUN-5989: Add in-memory otlp exporter
2022-04-06 23:20:29 +00:00
github.com/go-logr/stdr v1.2.2 // indirect
TUN-8006: Update quic-go to latest upstream
2023-12-04 09:49:00 +00:00
github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/gobwas/httphead v0.0.0-20200921212729-da3d93bc3c58 // indirect
github.com/gobwas/pool v0.2.1 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
github.com/golang/protobuf v1.5.4 // indirect
TUN-7227: Migrate to devincarr/quic-go The lucas-clemente/quic-go package moved namespaces and our branch went stale, this new fork provides support for the new quic-go repo and applies the max datagram frame size change. Until the max datagram frame size support gets upstreamed into quic-go, this can be used to unblock go 1.20 support as the old lucas-clemente/quic-go will not get go 1.20 support.
2023-05-06 00:42:41 +00:00
github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
github.com/grpc-ecosystem/grpc-gateway/v2 v2.19.1 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/grpc-ecosystem/grpc-opentracing v0.0.0-20180507213350-8e809c8a8645 // indirect
TUN-7125: Add management streaming logs WebSocket protocol
2023-04-04 22:45:32 +00:00
github.com/klauspost/compress v1.15.11 // indirect
TUN-7066: Bump coredns to v1.10.0 closes #857
2023-01-11 00:12:59 +00:00
github.com/kr/text v0.2.0 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/kylelemons/godebug v1.1.0 // indirect
TUN-6724: Migrate to sentry-go from raven-go
2022-12-25 04:44:15 +00:00
github.com/mattn/go-isatty v0.0.16 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version
2022-01-25 13:15:24 +00:00
github.com/modern-go/reflect2 v1.0.2 // indirect
TUN-8006: Update quic-go to latest upstream
2023-12-04 09:49:00 +00:00
github.com/onsi/ginkgo/v2 v2.9.5 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/opentracing/opentracing-go v1.2.0 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
TUN-7066: Bump coredns to v1.10.0 closes #857
2023-01-11 00:12:59 +00:00
github.com/prometheus/common v0.37.0 // indirect
github.com/prometheus/procfs v0.8.0 // indirect
TUN-5959: tidy go.mod
2022-03-25 19:18:49 +00:00
github.com/russross/blackfriday/v2 v2.1.0 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
go.opentelemetry.io/otel/metric v1.26.0 // indirect
TUN-8371: Bump quic-go to v0.42.0 ## Summary We discovered that we were being impacted by a bug in quic-go, that could create deadlocks and not close connections. This commit bumps quic-go to the version that contains the fix to prevent that from happening.
2024-04-18 17:26:01 +00:00
go.uber.org/mock v0.4.0 // indirect
TUN-7227: Migrate to devincarr/quic-go The lucas-clemente/quic-go package moved namespaces and our branch went stale, this new fork provides support for the new quic-go repo and applies the max datagram frame size change. Until the max datagram frame size support gets upstreamed into quic-go, this can be used to unblock go 1.20 support as the old lucas-clemente/quic-go will not get go 1.20 support.
2023-05-06 00:42:41 +00:00
golang.org/x/exp v0.0.0-20221205204356-47842c84f3db // indirect
TUN-8006: Update quic-go to latest upstream
2023-12-04 09:49:00 +00:00
golang.org/x/mod v0.11.0 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
golang.org/x/oauth2 v0.17.0 // indirect
golang.org/x/text v0.15.0 // indirect
TUN-8006: Update quic-go to latest upstream
2023-12-04 09:49:00 +00:00
golang.org/x/tools v0.9.1 // indirect
TUN-8052: Update go to 1.21.5 Also update golang.org/x/net and google.golang.org/grpc to fix vulnerabilities, although cloudflared is using them in a way that is not exposed to those risks
2023-12-11 11:58:19 +00:00
google.golang.org/appengine v1.6.8 // indirect
TUN-8407: Upgrade go to version 1.22.2
2024-05-07 10:19:58 +00:00
google.golang.org/genproto/googleapis/api v0.0.0-20240227224415-6ceb2ff114de // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20240227224415-6ceb2ff114de // indirect
google.golang.org/grpc v1.63.0 // indirect
TUN-6293: Update yaml v3 to latest hotfix This addresses https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2841557 by updating yaml v3 to latest version. It also stops using yaml v2 directly (we were using both v2 and v3 mixed). We still rely on yaml v2 indirectly, via urfave cli, though. Note that the security vulnerability does not affect v2.
2022-05-30 15:19:51 +00:00
gopkg.in/yaml.v2 v2.4.0 // indirect
TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version
2021-09-21 11:06:27 +00:00
)
TUN-4116: Ingore credentials-file setting in configuration file during tunnel create and delete opeations. This change has two parts: 1. Update to newer version of the urfave/cli fork that correctly sets flag value along the context hierarchy while respecting config file overide behavior of the most specific instance of the flag. 2. Redefine --credentials-file flag so that create and delete subcommand don't use value from the config file.
2021-03-24 02:52:14 +00:00
replace github.com/urfave/cli/v2 => github.com/ipostelnik/cli/v2 v2.3.1-0.20210324024421-b6ea8234fe3d
TUN-5623: Configure quic max datagram frame size to 1350 bytes for none Windows platforms
2022-01-06 12:17:10 +00:00
TUN-5995: Force prometheus v1.12.1 usage
2022-04-07 09:51:52 +00:00
// Avoid 'CVE-2022-21698'
replace github.com/prometheus/golang_client => github.com/prometheus/golang_client v1.12.1
TUN-6601: Update gopkg.in/yaml.v3 references in modules
2022-07-27 09:05:15 +00:00
replace gopkg.in/yaml.v3 => gopkg.in/yaml.v3 v3.0.1