Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cloudquery/plugin-pb-go
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 70dba26
Choose a base ref
...
head repository: cloudquery/plugin-pb-go
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 722fbe7
Choose a head ref
  • 2 commits
  • 4 files changed
  • 1 contributor

Commits on Dec 2, 2024

  1. fix(deps): Update module github.com/hashicorp/go-retryablehttp to v0.… 

    …7.7 [SECURITY] (#440)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/hashicorp/go-retryablehttp](https://togithub.com/hashicorp/go-retryablehttp) | indirect | patch | `v0.7.5` -> `v0.7.7` |

### GitHub Vulnerability Alerts

#### [CVE-2024-6104](https://nvd.nist.gov/vuln/detail/CVE-2024-6104)

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

---

### Release Notes

<details>
<summary>hashicorp/go-retryablehttp (github.com/hashicorp/go-retryablehttp)</summary>

### [`v0.7.7`](https://togithub.com/hashicorp/go-retryablehttp/compare/v0.7.6...v0.7.7)

[Compare Source](https://togithub.com/hashicorp/go-retryablehttp/compare/v0.7.6...v0.7.7)

### [`v0.7.6`](https://togithub.com/hashicorp/go-retryablehttp/compare/v0.7.5...v0.7.6)

[Compare Source](https://togithub.com/hashicorp/go-retryablehttp/compare/v0.7.5...v0.7.6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJzZWN1cml0eSJdfQ==-->
    @cq-bot
    cq-bot authored Dec 2, 2024
    Configuration menu
    Copy the full SHA
    1ef2d93 View commit details
    Browse the repository at this point in the history

  2. chore(main): Release v1.25.5 (#441) 

    🤖 I have created a release *beep* *boop*
---


## [1.25.5](v1.25.4...v1.25.5) (2024-12-02)


### Bug Fixes

* **deps:** Update module github.com/hashicorp/go-retryablehttp to v0.7.7 [SECURITY] ([#440](#440)) ([1ef2d93](1ef2d93))

---
This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
    @cq-bot
    cq-bot authored Dec 2, 2024
    Configuration menu
    Copy the full SHA
    722fbe7 View commit details
    Browse the repository at this point in the history
Loading