Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upgrade cyclonedx to v0.7.0 #267

Conversation

katmutua
Copy link
Contributor

@katmutua katmutua commented Oct 27, 2022

Pull request

webhook/go.mod Outdated
@@ -27,3 +27,5 @@ require (
sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
)

replace github.com/CycloneDX/cyclonedx-go => github.com/CycloneDX/cyclonedx-go v0.6.0
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

go.mod Outdated
@@ -123,3 +123,5 @@ require (
sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
)

replace github.com/CycloneDX/cyclonedx-go => github.com/CycloneDX/cyclonedx-go v0.6.0
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd expect to see a replace for the webhook module here instead. Something like:

Suggested change
replace github.com/CycloneDX/cyclonedx-go => github.com/CycloneDX/cyclonedx-go v0.6.0
replace github.com/vmware-tanzu/cartographer-conventions/webhook => ./webhook

It would also be nice to pull this up to the top so that it's not burried under the indirect dependencies.

@katmutua katmutua changed the title pin cyclonedx to a compatible version upgrade cyclonedx to v0.7.0 Oct 28, 2022
@codecov-commenter
Copy link

Codecov Report

Merging #267 (70b1bc8) into main (dc3b77f) will not change coverage.
The diff coverage is 100.00%.

@@           Coverage Diff           @@
##             main     #267   +/-   ##
=======================================
  Coverage   69.88%   69.88%           
=======================================
  Files          17       17           
  Lines         943      943           
=======================================
  Hits          659      659           
  Misses        263      263           
  Partials       21       21           
Impacted Files Coverage Δ
pkg/binding/image_config.go 75.27% <100.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@katmutua katmutua added the blocked Blocked e.g under investigation, awaiting other task completion label Oct 31, 2022
@katmutua katmutua closed this Oct 31, 2022
@katmutua katmutua deleted the pin-cyclonedx-version-to-lock-compatible-version branch October 31, 2022 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked Blocked e.g under investigation, awaiting other task completion cla-not-required
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants