security(compose): upgrade github.com/docker/compose/v2 to fix security vulnerability#3095
Merged
mdelapenya merged 1 commit intotestcontainers:mainfrom Apr 11, 2025
Conversation
✅ Deploy Preview for testcontainers-go ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
mdelapenya
reviewed
Apr 11, 2025
mdelapenya
reviewed
Apr 11, 2025
Member
mdelapenya
left a comment
There was a problem hiding this comment.
This LGTM, just added a question, but once addressed and the CI pass, we are good to go, thanks for your work here!
…older version of github.com/golang-jwt/jwt by updating to the latest version of compose (v2.35.0) which has been fixed. See testcontainers#3088 for more details.
8b7ceff to
30424b3
Compare
Contributor
Author
|
I rebased my branch |
mdelapenya
added a commit
to jm96441n/testcontainers-go
that referenced
this pull request
Apr 11, 2025
* main: security(compose): upgrade github.com/docker/compose/v2 to fix security vulnerability (testcontainers#3095)
mdelapenya
added a commit
to mdelapenya/testcontainers-go
that referenced
this pull request
Apr 11, 2025
* main: security(compose): upgrade github.com/docker/compose/v2 to fix security vulnerability (testcontainers#3095) feat: add more functional options to the modules API (testcontainers#3070)
mdelapenya
added a commit
to mdelapenya/testcontainers-go
that referenced
this pull request
Apr 14, 2025
* main: (91 commits) chore(deps): bump github/codeql-action from 3.28.13 to 3.28.15 (testcontainers#3097) chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.37.0 (testcontainers#3098) feat(aerospike): add Aerospike module (testcontainers#3094) security(compose): upgrade github.com/docker/compose/v2 to fix security vulnerability (testcontainers#3095) feat: add more functional options to the modules API (testcontainers#3070) chore(deps): bump golang.org/x/net in /modules/arangodb (testcontainers#3087) feat: add arangodb module (testcontainers#3083) chore(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 (testcontainers#3086) chore(deps): bump SonarSource/sonarqube-scan-action from 5.0.0 to 5.1.0 (testcontainers#3085) feat: add socat container (testcontainers#3071) fix(mssql): reduce flakiness in tests (testcontainers#3084) chore: bump golangci-lint to v2 (testcontainers#3082) chore(gcloud): deprecate old gcp containers, creating subpackages for them (testcontainers#3063) fix(mongodb): replica set initialization & connection handling (testcontainers#2984) chore(deps): bump docker/setup-docker-action from 4.2.0 to 4.3.0 (testcontainers#3077) chore(deps): bump github/codeql-action from 3.28.12 to 3.28.13 (testcontainers#3078) chore(deps): bump tj-actions/changed-files from 45.0.4 to 46.0.3 (testcontainers#3076) docs: add dependabot configuration (testcontainers#3074) chore(deps): replace `golang.org/x/exp/slices` with stdlib (testcontainers#3075) fix(dind): use docker image load (testcontainers#3073) ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR fixes a vulnerability found in an older version of
github.com/golang-jwt/jwtby upgrading to latest version of compose (v2.35.0) which contains the fix. See #3088 for more details.What does this PR do?
Upgrades the version of
github.com/docker/compose/v2used inmodules/compose.Why is it important?
The change is important because of the vulnerability found here GHSA-mh63-6h87-95cp.
Related issues
closes #3088