Update Dependencies - Githubissues

cyberark / cloudfoundry-conjur-buildpack

Buildpack for the Conjur / Cloud Foundry integration

Apache License 2.0

0 stars 3 forks source link

Update Dependencies #164

Closed gl-johnson closed 1 year ago

gl-johnson commented 1 year ago

Desired Outcome

Update dependencies to address Snyk vulnerabilities. Ended up adding some misc cleanup tasks while working on failing builds.

Implemented Changes

Remove PHP test app
Update tests/integration/apps/java/pom.xml spring boot version
Update tests/integration/apps/ruby to Ruby 3, update dependencies
Update conjur-env/Dockerfile and tests/retrieve-secrets/Dockerfile golang base image to 1.20
Update conjur-env/go.mod dependencies
Prep for 2.2.7 release

A couple issues cropped up:

Spring Boot 3.x was causing CI issues with the Java test app so stick with latest 2.x for the time being
Currently Sinatra only supports Rack v2, so we're stuck with the latest 2.x version of Rack for now

Definition of Done

At least 1 todo must be completed in the sections below for the PR to be merged.

Changelog

[x] The CHANGELOG has been updated, or
[ ] This PR does not include user-facing changes and doesn't require a CHANGELOG update

Test coverage

[ ] This PR includes new unit and integration tests to go with the code changes, or
[x] The changes in this PR do not require tests

Documentation

[ ] Docs (e.g. READMEs) were updated in this PR
[ ] A follow-up issue to update official docs has been filed here: [insert issue ID]
[x] This PR does not require updating any documentation

Behavior

[ ] This PR changes product behavior and has been reviewed by a PO, or
[ ] These changes are part of a larger initiative that will be reviewed later, or
[x] No behavior was changed with this PR

Security

[ ] Security architect has reviewed the changes in this PR,
[ ] These changes are part of a larger initiative with a separate security review, or
[x] There are no security aspects to these changes