search

go-openapi / strfmt

openapi toolkit common string formats
Apache License 2.0
102 stars 62 forks source link

Upgrade go.mongodb.org/mongo-driver version to v1.4.2 #69

Closed bvwells closed 4 years ago

bvwells commented 4 years ago

Upgrade go.mongodb.org/mongo-driver version to v1.4.2. Version v1.0.3 has various vulnerabilities which are highlighted in various code scanners.

codecov[bot] commented 4 years ago

Codecov Report

Merging #69 into master will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #69   +/-   ##
=======================================
  Coverage   81.63%   81.63%           
=======================================
  Files          10       10           
  Lines        1285     1285           
=======================================
  Hits         1049     1049           
  Misses        164      164           
  Partials       72       72

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 81c4c85...2292ffd. Read the comment docs.

bvwells commented 4 years ago

Thanks for the review and merge @casualjim!

bvwells commented 4 years ago

@casualjim do you know when you are planning to have the next patch release of this module?

casualjim commented 4 years ago

done

bvwells commented 4 years ago

Great! Many thanks @casualjim. I can roll this version out across other go-openapi modules if that is okay with you?

casualjim commented 4 years ago

That's fine although it's not strictly required

bvwells commented 4 years ago

The static analysers I am using analyse the go.sum file so even upgrading our code to the latest go-openapi/strfmt we still have go.sum entries for old versions of this module as the dependency of other go-openapi modules e.g. go-openapi/runtime.

I've noticed that there is a circular dependency between github.com/go-openapi/loads and github.com/go-openapi/analysis. Do you update this in any particular order?