Automated dependency upgrades

hashicorp / vault-plugin-auth-gcp

GCP Authentication Plugin for Vault

Mozilla Public License 2.0

53 stars 25 forks source link

Automated dependency upgrades #195

Closed hc-github-team-secure-vault-ecosystem closed 8 months ago

hc-github-team-secure-vault-ecosystem commented 8 months ago

Full log: https://github.com/hashicorp/vault-plugin-auth-gcp/actions/runs/8104458637

IMPROVEMENTS:

Updated dependencies:
- github.com/hashicorp/vault/api v1.11.0 -> v1.12.0
- github.com/hashicorp/vault/sdk v0.10.2 -> v0.11.0
- golang.org/x/oauth2 v0.16.0 -> v0.17.0
- google.golang.org/api v0.161.0 -> v0.167.0

hc-github-team-secure-vault-core commented 8 months ago

Vault CI check PR: https://github.com/hashicorp/vault/pull/25738

tvoran commented 8 months ago

One of the google deps is pulling in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.48.0 which has a data race (fixed in v0.49.0), which is failing a couple of the vault tests.

This will also need make mocks run before it'll work with the new Vault libs.