Skip to content

Upgrade go-jose/v3 v3.0.4 -> v3.0.5 to fix CVE-2024-34986. Bumps Go f…#190

Open
piotrsenkow wants to merge 1 commit into
masterfrom
chore/pps-3039-3040
Open

Upgrade go-jose/v3 v3.0.4 -> v3.0.5 to fix CVE-2024-34986. Bumps Go f…#190
piotrsenkow wants to merge 1 commit into
masterfrom
chore/pps-3039-3040

Conversation

@piotrsenkow

Copy link
Copy Markdown
Contributor

…rom 1.17 to 1.23. Required because: go-jose v3.0.5 uses bytes.Clone (Go 1.20+) and go-jose v3.0.5 depends on x/crypto v0.39.0 which requires Go 1.23. Also updates Dockerfilebase image from golang:1.17-bullseye to golang:1.23-bookworm and postgresql from 13 to 15 (bookworm ships 15).

Link to JIRA ticket if there is one:

New Features

Breaking Changes

Bug Fixes

Improvements

Dependency updates

Deployment changes

…rom 1.17 to 1.23. Required because: go-jose v3.0.5 uses bytes.Clone (Go 1.20+) and go-jose v3.0.5 depends on x/crypto v0.39.0 which requires Go 1.23. Also updates Dockerfilebase image from golang:1.17-bullseye to golang:1.23-bookworm and postgresql from 13 to 15 (bookworm ships 15).
@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 75.201%. remained the same — chore/pps-3039-3040 into master

@github-actions

github-actions Bot commented May 1, 2026

Copy link
Copy Markdown

Test summary after running integration tests

filepath passed failed error skipped SUBTOTAL
tests/test_gen3_workflow.py 0 0 0 18 18
tests/test_graph_submit_and_query.py 13 0 0 1 14
tests/test_audit_service.py 2 1 0 3 6
tests/test_ras_authn.py 0 0 0 3 3
tests/test_dbgap.py 0 0 4 1 5
tests/test_user_login_activation.py 0 2 0 1 3
tests/test_user_data_library.py 0 2 2 1 5
tests/test_gen3ff_landing_page.py 0 0 0 2 2
tests/test_env_sanity.py 0 0 0 1 1
tests/test_etl.py 0 0 0 1 1
tests/test_oauth2.py 10 5 0 0 15
tests/test_dicom_viewer.py 1 0 3 0 4
tests/test_centralized_auth.py 4 12 0 0 16
tests/test_pfb_export.py 1 0 1 0 2
tests/test_user_token.py 2 3 0 0 5
tests/test_data_upload.py 0 0 9 0 9
tests/test_presigned_url.py 0 0 7 0 7
tests/test_drs_endpoint.py 0 0 4 0 4
tests/test_study_viewer.py 0 3 1 0 4
tests/test_discoverypage.py 0 1 1 0 2
tests/test_guppy_service.py 0 0 8 0 8
tests/test_google_data_access.py 0 0 1 0 1
tests/test_requestor.py 0 5 0 0 5
tests/test_workspace.py 0 1 0 0 1
tests/test_fence_admin.py 0 2 0 0 2
tests/test_login_page.py 0 2 0 0 2
tests/test_register_user.py 0 2 0 0 2
tests/test_oidc_client.py 0 2 0 0 2
tests/test_client_credentials.py 0 1 0 0 1
tests/test_gen3client.py 0 1 0 0 1
tests/test_manifest_service.py 0 1 0 0 1
tests/test_aggregate_mds.py 0 1 0 0 1
tests/test_homepage.py 0 1 0 0 1
TOTAL 33 48 41 32 154

Test summary after rerunning failed integration tests

filepath passed error skipped SUBTOTAL
tests/test_presigned_url.py 7 0 0 7
tests/test_centralized_auth.py 12 0 0 12
tests/test_data_upload.py 8 0 1 9
tests/test_oauth2.py 5 0 0 5
tests/test_pfb_export.py 1 0 0 1
tests/test_requestor.py 5 0 0 5
tests/test_guppy_service.py 8 0 0 8
tests/test_drs_endpoint.py 4 0 0 4
tests/test_user_token.py 3 0 0 3
tests/test_dbgap.py 4 0 0 4
tests/test_study_viewer.py 3 0 0 3
tests/test_discoverypage.py 1 0 0 1
tests/test_user_login_activation.py 2 0 0 2
tests/test_login_page.py 2 0 0 2
tests/test_register_user.py 2 0 0 2
tests/test_workspace.py 1 0 0 1
tests/test_oidc_client.py 2 0 0 2
tests/test_user_data_library.py 2 0 0 2
tests/test_manifest_service.py 1 0 0 1
tests/test_fence_admin.py 2 0 0 2
tests/test_audit_service.py 1 0 0 1
tests/test_client_credentials.py 1 0 0 1
tests/test_homepage.py 1 0 0 1
tests/test_aggregate_mds.py 1 0 0 1
tests/test_google_data_access.py 1 0 0 1
tests/test_dicom_viewer.py 0 3 0 3
tests/test_gen3client.py 0 1 0 1
TOTAL 80 4 1 85

Please find the detailed integration test report here

Please find the detailed integration test report after rerunning failed tests here

Please find the Github Action logs here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants