Update gosu package as its having vulnerabilities

amir272 commented 7 months ago

We have gosu version as 1.14 currently. This is in turn uses go version 1.16.7 . Using this version has resulted in a few vulnerabilities. We are upgrading gosu package to 1.16 to fix these vulnerabilities

Discussion for the issue: https://wiremock-community.slack.com/archives/C03NAEH5LVA/p1700000714509919 Latest gosu version 1.17: https://github.com/tianon/gosu/releases/tag/1.16

Submitter checklist

[x] Recommended: Join WireMock Slack to get any help in #help-contributing or a project-specific channel like #wiremock-java
[ ] Recommended: If you participate in Hacktoberfest 2023, make sure you're signed up there and in the WireMock form
[x] The PR request is well described and justified, including the body and the references
[x] The PR title represents the desired changelog entry
[x] The repository's code style is followed (see the contributing guide)
[x] Test coverage that demonstrates that the change works as expected
[x] For new features, there's necessary documentation in this pull request or in a subsequent PR to wiremock.org

amir272 commented 7 months ago

I tested it locally, works on the recent Linux/Docker engine

Thanks.I wonder why docker-build is failing. Could you please have a look

oleg-nenashev commented 7 months ago

It is not related to the PR AFAICT, looks like a regression in the CI pipeline. I will merge it and resolve the CI issues in the main branch

wiremock / wiremock-docker

Update gosu package as its having vulnerabilities #97

Submitter checklist