Skip to content

Release vault-plugin-secrets-ksm v1.0.5 #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 11 commits into
base: master
Choose a base branch
from
Open

Release vault-plugin-secrets-ksm v1.0.5 #691

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
105cbea
KSM-577 Bump golang.org/x/crypto from 0.27.0 to 0.31.0
idimov-keeper Dec 13, 2024
1da7c89
KSM-578 Upgrade to golang.org/x/net v0.33.0 (fix CVE-2024-45338) (#692)
idimov-keeper Dec 20, 2024
aefd3b3
KSM-585 Upgrade go-jose/v4 to 4.0.5 (security fix) (#703)
idimov-keeper Feb 27, 2025
8596c99
KSM-585 Upgrade go-jose/v4 to 4.0.5 (security fix) (#703)
idimov-keeper Feb 27, 2025
a84308a
Merge branch 'release/integration/vault-plugin-secrets-ksm/v1.0.5'
idimov-keeper Mar 13, 2025
81fd0c8
KSM-607 hashicorp vault plugin upgrade golang.org-x-crypto to 0.37 (#…
idimov-keeper Apr 18, 2025
9d04dac
KSM-608 Upgrade golang.org/x/net to 0.39.0 (security fix) (#731)
idimov-keeper Apr 18, 2025
269d735
resolved indirect dependency naming conflict inside hashicorp/vault/sdk
idimov-keeper Apr 18, 2025
586939b
KSM-640 Upgrade github.com/docker/docker to v28.3.3 (security fix) (#…
idimov-keeper Aug 14, 2025
0d7d0ec
added CGO_ENABLED=0 option to Makefile
idimov-keeper Aug 16, 2025
22e376b
fixed a typo
idimov-keeper Aug 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions integration/vault-plugin-secrets-ksm/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,11 @@
## 1.0.5

- KSM-577: Upgrade golang.org/x/crypto to 0.31.0 (security fix)
- KSM-578: Upgrade golang.org/x/net to 0.33.0 (security fix)
- KSM-585: Upgrade go-jose/v4 to 4.0.5 (security fix)
- KSM-607: Upgrade golang.org/x/crypto to 0.37.0 (security fix)
- KSM-608: Upgrade golang.org/x/net to 0.39.0 (security fix)
- KSM-640: Upgrade github.com/docker/docker to v28.3.3 (security fix)

## 1.0.4

Expand Down
6 changes: 4 additions & 2 deletions integration/vault-plugin-secrets-ksm/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,16 @@ release:

release-all: release-other release-win-x86 release-win-x64 release-checksum drop-keys

# NB! Use Go 1.25+ CGO_ENABLED=0 stable at Go 1.22+ but faulty and unreliable (min working version: Go 1.25)
# Produces truly static build relying only on Go toolchain - no more MUSL/GLIBC version mismatch troubles
release-other:
$(eval GOOS=darwin) $(eval GOARCH=amd64) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=darwin) $(eval GOARCH=arm64) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=freebsd) $(eval GOARCH=386) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=freebsd) $(eval GOARCH=amd64) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=freebsd) $(eval GOARCH=arm) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=386) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=amd64) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=386) GOOS=${GOOS} GOARCH=${GOARCH} CGO_ENABLED=0 go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=amd64) GOOS=${GOOS} GOARCH=${GOARCH} CGO_ENABLED=0 go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=arm) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}
$(eval GOOS=linux) $(eval GOARCH=arm64) GOOS=${GOOS} GOARCH=${GOARCH} go build -o ${NAME} ; zip -m ${NAME}_${VERSION}_${GOOS}_${GOARCH}.zip ${NAME}

Expand Down
112 changes: 69 additions & 43 deletions integration/vault-plugin-secrets-ksm/go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,91 +1,117 @@
module github.com/keeper-security/secrets-manager/integration/vault-plugin-secrets-ksm

go 1.22
go 1.24.0

toolchain go1.23.1
toolchain go1.24.2

require (
github.com/hashicorp/go-hclog v1.6.3
github.com/hashicorp/vault/api v1.15.0
github.com/hashicorp/vault/sdk v0.14.0
github.com/hashicorp/vault/api v1.20.0
github.com/hashicorp/vault/sdk v0.18.0
github.com/keeper-security/secrets-manager-go/core v1.6.4
)

require (
cloud.google.com/go/auth v0.16.4 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/cloudsqlconn v1.18.0 // indirect
cloud.google.com/go/compute/metadata v0.8.0 // indirect
github.com/Microsoft/go-winio v0.6.2 // indirect
github.com/armon/go-metrics v0.4.1 // indirect
github.com/armon/go-radix v1.0.0 // indirect
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
github.com/containerd/errdefs v1.0.0 // indirect
github.com/containerd/errdefs/pkg v0.3.0 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/distribution/reference v0.6.0 // indirect
github.com/docker/docker v27.3.0+incompatible // indirect
github.com/docker/go-connections v0.5.0 // indirect
github.com/docker/docker v28.3.3+incompatible // indirect
github.com/docker/go-connections v0.6.0 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/evanphx/json-patch/v5 v5.9.0 // indirect
github.com/fatih/color v1.17.0 // indirect
github.com/evanphx/json-patch/v5 v5.9.11 // indirect
github.com/fatih/color v1.18.0 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/go-jose/go-jose/v4 v4.0.4 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-jose/go-jose/v4 v4.1.2 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/gogo/protobuf v1.3.2 // indirect
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/golang/snappy v0.0.4 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 // indirect
github.com/golang/snappy v1.0.0 // indirect
github.com/google/certificate-transparency-go v1.3.2 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
github.com/googleapis/gax-go/v2 v2.15.0 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-hmac-drbg v0.0.0-20210916214228-a6e5a68489f6 // indirect
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
github.com/hashicorp/go-kms-wrapping/entropy/v2 v2.0.1 // indirect
github.com/hashicorp/go-kms-wrapping/v2 v2.0.16 // indirect
github.com/hashicorp/go-kms-wrapping/v2 v2.0.18 // indirect
github.com/hashicorp/go-metrics v0.5.4 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-plugin v1.6.1 // indirect
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
github.com/hashicorp/go-plugin v1.7.0 // indirect
github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
github.com/hashicorp/go-secure-stdlib/cryptoutil v0.1.1 // indirect
github.com/hashicorp/go-secure-stdlib/mlock v0.1.3 // indirect
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.8 // indirect
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 // indirect
github.com/hashicorp/go-secure-stdlib/permitpool v1.0.0 // indirect
github.com/hashicorp/go-secure-stdlib/plugincontainer v0.4.1 // indirect
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
github.com/hashicorp/go-sockaddr v1.0.6 // indirect
github.com/hashicorp/go-sockaddr v1.0.7 // indirect
github.com/hashicorp/go-uuid v1.0.3 // indirect
github.com/hashicorp/go-version v1.7.0 // indirect
github.com/hashicorp/golang-lru v1.0.2 // indirect
github.com/hashicorp/hcl v1.0.1-vault-5 // indirect
github.com/hashicorp/yamux v0.1.1 // indirect
github.com/hashicorp/hcl v1.0.1-vault-7 // indirect
github.com/hashicorp/yamux v0.1.2 // indirect
github.com/jackc/chunkreader/v2 v2.0.1 // indirect
github.com/jackc/pgconn v1.14.3 // indirect
github.com/jackc/pgio v1.0.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgproto3/v2 v2.3.3 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/pgtype v1.14.4 // indirect
github.com/jackc/pgx/v4 v4.18.3 // indirect
github.com/joshlf/go-acl v0.0.0-20200411065538-eae00ae38531 // indirect
github.com/kr/pretty v0.3.1 // indirect
github.com/mattn/go-colorable v0.1.13 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/go-homedir v1.1.0 // indirect
github.com/mitchellh/go-testing-interface v1.14.1 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/oklog/run v1.1.0 // indirect
github.com/moby/docker-image-spec v1.3.1 // indirect
github.com/moby/sys/atomicwriter v0.1.0 // indirect
github.com/oklog/run v1.2.0 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.0 // indirect
github.com/petermattis/goid v0.0.0-20240813172612-4fcff4a6cae7 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/petermattis/goid v0.0.0-20250813065127-a731cc31b4fe // indirect
github.com/pierrec/lz4 v2.6.1+incompatible // indirect
github.com/pkg/errors v0.9.1 // indirect
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/rogpeppe/go-internal v1.12.0 // indirect
github.com/robfig/cron/v3 v3.0.1 // indirect
github.com/ryanuber/go-glob v1.0.0 // indirect
github.com/sasha-s/go-deadlock v0.3.5 // indirect
github.com/stretchr/testify v1.9.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.55.0 // indirect
go.opentelemetry.io/otel v1.30.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.30.0 // indirect
go.opentelemetry.io/otel/metric v1.30.0 // indirect
go.opentelemetry.io/otel/trace v1.30.0 // indirect
go.opentelemetry.io/proto/otlp v1.3.1 // indirect
github.com/stretchr/testify v1.10.0 // indirect
go.opencensus.io v0.24.0 // indirect
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0 // indirect
go.opentelemetry.io/otel v1.37.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 // indirect
go.opentelemetry.io/otel/metric v1.37.0 // indirect
go.opentelemetry.io/otel/trace v1.37.0 // indirect
go.opentelemetry.io/proto/otlp v1.7.1 // indirect
go.uber.org/atomic v1.11.0 // indirect
golang.org/x/crypto v0.27.0 // indirect
golang.org/x/net v0.29.0 // indirect
golang.org/x/sys v0.25.0 // indirect
golang.org/x/text v0.18.0 // indirect
golang.org/x/time v0.6.0 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect
google.golang.org/grpc v1.66.2 // indirect
google.golang.org/protobuf v1.34.2 // indirect
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
golang.org/x/crypto v0.41.0 // indirect
golang.org/x/net v0.43.0 // indirect
golang.org/x/oauth2 v0.30.0 // indirect
golang.org/x/sys v0.35.0 // indirect
golang.org/x/text v0.28.0 // indirect
golang.org/x/time v0.12.0 // indirect
google.golang.org/api v0.247.0 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20250811230008-5f3141c8851a // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20250811230008-5f3141c8851a // indirect
google.golang.org/grpc v1.74.2 // indirect
google.golang.org/protobuf v1.36.7 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)
Loading
Loading