Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
88 changes: 40 additions & 48 deletions go.mod
Original file line number Diff line number Diff line change
@@ -1,28 +1,26 @@
module github.com/openshift/oadp-must-gather

go 1.23.1

toolchain go1.23.4
go 1.25.0

require (
github.com/kubernetes-csi/external-snapshotter/client/v8 v8.0.0
github.com/migtools/oadp-non-admin v0.0.0-20250723060453-4e222296abc4
github.com/kubernetes-csi/external-snapshotter/client/v8 v8.2.0
github.com/migtools/oadp-non-admin v0.0.0-20260209203724-142aac7b08c8
github.com/openshift/api v0.0.0-20240912201240-0a8800162826
github.com/openshift/oadp-operator v1.0.2-0.20250730170413-d68148204751
github.com/openshift/oadp-operator v1.0.2-0.20260306232527-7c8a3f1ec3ef
github.com/openshift/oc v0.0.0-alpha.0.0.20250108103617-ae1bd9e4a75b
github.com/operator-framework/api v0.26.0
github.com/spf13/cobra v1.8.1
github.com/vmware-tanzu/velero v1.14.0
k8s.io/api v0.31.3
k8s.io/apiextensions-apiserver v0.31.3
k8s.io/apimachinery v0.31.3
k8s.io/cli-runtime v0.31.3
k8s.io/client-go v0.31.3
sigs.k8s.io/controller-runtime v0.19.3
k8s.io/api v0.33.3
k8s.io/apiextensions-apiserver v0.33.3
k8s.io/apimachinery v0.33.3
k8s.io/cli-runtime v0.33.3
k8s.io/client-go v0.33.3
sigs.k8s.io/controller-runtime v0.21.0
)

require (
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
github.com/MakeNowJust/heredoc v1.0.0 // indirect
github.com/aws/aws-sdk-go v1.53.12 // indirect
github.com/aws/aws-sdk-go-v2 v1.30.3 // indirect
Expand Down Expand Up @@ -51,40 +49,35 @@ require (
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/emicklei/go-restful/v3 v3.12.1 // indirect
github.com/evanphx/json-patch v5.9.0+incompatible // indirect
github.com/evanphx/json-patch/v5 v5.9.0 // indirect
github.com/evanphx/json-patch/v5 v5.9.11 // indirect
github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
github.com/fatih/color v1.18.0 // indirect
github.com/fsnotify/fsnotify v1.7.0 // indirect
github.com/fxamacker/cbor/v2 v2.7.0 // indirect
github.com/go-errors/errors v1.4.2 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-openapi/jsonpointer v0.21.0 // indirect
github.com/go-openapi/jsonreference v0.21.0 // indirect
github.com/go-openapi/swag v0.23.0 // indirect
github.com/gobwas/glob v0.2.3 // indirect
github.com/gogo/protobuf v1.3.2 // indirect
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/google/btree v1.0.1 // indirect
github.com/google/btree v1.1.3 // indirect
github.com/google/gnostic-models v0.6.9 // indirect
github.com/google/go-cmp v0.6.0 // indirect
github.com/google/gofuzz v1.2.0 // indirect
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/gorilla/websocket v1.5.0 // indirect
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

What is the latest stable tagged release of gorilla/websocket and are there any known issues with version 1.5.3 or 1.5.4?

💡 Result:

  • Latest stable tagged release: v1.5.3 (tagged Jun 14, 2024). [1][2]
  • Is there a stable v1.5.4? No—there’s no v1.5.4 tag/release in the upstream repo; there’s an open request to “Release 1.5.4 with https proxy support”. [3] (Some projects reference an unreleased pseudo-version like v1.5.4-0.20250319132907-e064f32e3674.) [4]

Known reported issues around v1.5.3 / “v1.5.4”

  • v1.5.3 release notes vs reality: An open bug report says v1.5.3 release notes claim hideTempErr was removed, but it still appears (due to a revert), so users upgrading to avoid hideTempErr panics may not get that benefit. [5]
  • Examples/docs: The chat example is reported broken unless CheckOrigin is implemented/adjusted. [6]
  • Toolchain compatibility/testing: A reported issue shows unit tests failing with Go 1.24 (TestPreparedMessage). [7]

Sources:
[1] GitHub tags list (shows v1.5.3 as latest tag, dated Jun 14, 2024) (github.com)
[2] pkg.go.dev (shows module version v1.5.3, published Jun 14, 2024) (pkg.go.dev)
[3] GitHub issue requesting “Release 1.5.4 with https proxy support” (github.com)
[4] GitLab omnibus component list referencing pseudo-version v1.5.4-0... (gitlab-org.gitlab.io)
[5] GitHub issue: v1.5.3 release notes claim hideTempErr removed but it isn’t (github.com)
[6] GitHub issue: chat example does not work (CheckOrigin) (github.com)
[7] GitHub issue: unit test fails with Go 1.24 (github.com)

Citations:


Replace pseudo-version with stable release or document justification.

The dependency uses an unreleased pseudo-version v1.5.4-0.20250319132907-e064f32e3674. The latest stable tagged release is v1.5.3 (June 14, 2024); v1.5.4 has not been officially released. Using unreleased commits in production dependencies introduces maintenance and stability risks. Either downgrade to v1.5.3 or, if this specific unreleased version is required for a critical fix or feature, add a comment documenting the reason and link to the upstream PR/issue tracking the eventual v1.5.4 release.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 69, The go.mod entry for module
"github.com/gorilla/websocket" currently pins an unreleased pseudo-version
(v1.5.4-0.20250319132907-e064f32e3674); either change that require line to the
latest stable tag "v1.5.3" or, if you truly need that specific unreleased
commit, replace the pseudo-version with the same value but add a clear comment
explaining why it’s required and include a link to the upstream PR/issue
tracking the v1.5.4 release (reference the module name
"github.com/gorilla/websocket" and the pseudo-version string when editing).

github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
github.com/imdario/mergo v0.3.16 // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
github.com/jmespath/go-jmespath v0.4.0 // indirect
github.com/josharian/intern v1.0.0 // indirect
github.com/json-iterator/go v1.1.12 // indirect
github.com/klauspost/compress v1.17.11 // indirect
github.com/kubernetes-csi/external-snapshotter/client/v7 v7.0.0 // indirect
github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
github.com/mailru/easyjson v0.7.7 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
github.com/moby/spdystream v0.4.0 // indirect
github.com/moby/spdystream v0.5.0 // indirect
github.com/moby/term v0.5.0 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
Expand All @@ -93,40 +86,39 @@ require (
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
github.com/pkg/errors v0.9.1 // indirect
github.com/prometheus/client_golang v1.20.5 // indirect
github.com/prometheus/client_model v0.6.1 // indirect
github.com/prometheus/common v0.62.0 // indirect
github.com/prometheus/procfs v0.15.1 // indirect
github.com/prometheus/client_golang v1.23.2 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.67.4 // indirect
github.com/prometheus/procfs v0.16.1 // indirect
github.com/russross/blackfriday/v2 v2.1.0 // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace // indirect
github.com/x448/float16 v0.8.4 // indirect
github.com/xlab/treeprint v1.2.0 // indirect
go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 // indirect
golang.org/x/net v0.41.0 // indirect
golang.org/x/oauth2 v0.27.0 // indirect
golang.org/x/sync v0.15.0 // indirect
golang.org/x/sys v0.33.0 // indirect
golang.org/x/term v0.32.0 // indirect
golang.org/x/text v0.26.0 // indirect
golang.org/x/time v0.9.0 // indirect
go.yaml.in/yaml/v2 v2.4.3 // indirect
golang.org/x/net v0.47.0 // indirect
golang.org/x/oauth2 v0.33.0 // indirect
golang.org/x/sync v0.18.0 // indirect
golang.org/x/sys v0.40.0 // indirect
golang.org/x/term v0.37.0 // indirect
golang.org/x/text v0.31.0 // indirect
golang.org/x/time v0.14.0 // indirect
gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
google.golang.org/protobuf v1.36.3 // indirect
google.golang.org/protobuf v1.36.10 // indirect
gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
gopkg.in/yaml.v2 v2.4.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
k8s.io/component-base v0.31.3 // indirect
k8s.io/component-base v0.33.3 // indirect
k8s.io/klog/v2 v2.130.1 // indirect
k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 // indirect
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
k8s.io/kubectl v0.30.5 // indirect
k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 // indirect
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
sigs.k8s.io/kustomize/api v0.17.2 // indirect
sigs.k8s.io/kustomize/kyaml v0.17.1 // indirect
sigs.k8s.io/structured-merge-diff/v4 v4.4.3 // indirect
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 // indirect
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
sigs.k8s.io/kustomize/api v0.19.0 // indirect
sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect
sigs.k8s.io/randfill v1.0.0 // indirect
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
sigs.k8s.io/yaml v1.4.0 // indirect
)

replace github.com/vmware-tanzu/velero => github.com/openshift/velero v0.10.2-0.20250313160323-584cf1148a74
replace github.com/vmware-tanzu/velero => github.com/openshift/velero v0.10.2-0.20260310095129-ca5442fb1a74
Loading