ObolNetwork / charon

Charon (pronounced 'kharon') is a Proof of Stake Ethereum Distributed Validator Client
https://docs.obol.tech/
Other
195 stars 86 forks source link

update outdated dependencies (OBOL-12) #2083

Closed xenowits closed 1 year ago

xenowits commented 1 year ago

๐ŸŽฏ Problem to be solved

Update the outdated dependencies.

๐Ÿ› ๏ธ Proposed solution

Update the following dependencies:

1. github.com/bufbuild/buf v1.14.0 (latest version is v1.17.1)
2. github.com/golang/snappy v0.0.4 (latest version is v0.0.5)
3. github.com/gorilla/mux v1.8.0 (latest version is v1.8.1)
4. github.com/spf13/cobra v1.6.1 (latest version is v1.6.3)
5. github.com/spf13/pflag v1.0.5 (latest version is v1.0.8)
6. github.com/spf13/viper v1.15.0 (latest version is v1.16.0)
7. github.com/stretchr/testify v1.8.1 (latest version is v1.8.3)
8. golang.org/x/oauth2 v0.5.0 (latest version is v0.5.2)
9. gopkg.in/cenkalti/backoff.v1 v1.1.0 (latest version is v2.2.1)

Describe the solution to be implemented

๐Ÿงช Tests

xenowits commented 1 year ago

The latest version recommendations from the audit are wrong. In particular, all of them are "1 patch version" ahead of latest releases, so they are not released yet.

Closing this since dependabot already tracks the mentioned dependencies