chore(deps): update module github.com/google/certificate-transparency-go to v1.2.2 #24
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
2b662ca
to
16615ea
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
16615ea
to
804ad66
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
804ad66
to
caad311
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
caad311
to
ebcb39d
Compare
renovate-bot
changed the title
|
| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
|---|---|---|---|---|---|
| - | - | Generic Password | e35d138 | vendor/github.com/google/certificate-transparency-go/cloudbuild.yaml | View secret |
| - | - | Generic Password | e35d138 | vendor/github.com/google/certificate-transparency-go/cloudbuild_master.yaml | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secrets safely. Learn here the best practices.
- Revoke and rotate these secrets.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
ebcb39d
to
fd92b19
Compare
renovate-bot
changed the title
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
fd92b19
to
be494d6
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
be494d6
to
7a5b12f
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
7a5b12f
to
38b6406
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
38b6406
to
3a96138
Compare
renovate-bot
force-pushed
the
renovate/github.com-google-certificate-transparency-go-1.x
branch
from
3a96138
to
e35d138
Compare
renovate-bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.1.7->v1.2.2Release Notes
google/certificate-transparency-go (github.com/google/certificate-transparency-go)
v1.2.2Compare Source
Add TLS Support
Add TLS support for Trillian: By using
--trillian_tls_ca_cert_fileflag, users can provide a CA certificate, that is used to establish a secure communication with Trillian log server.Add TLS support for ct_server: By using
--tls_certificateand--tls_keyflags, users can provide a service certificate and key, that enables the server to handle HTTPS requests.HTTP Idle Connection Timeout Flag
A new flag
http_idle_timeoutis added to set the HTTP server's idle timeout value in the ct_server binary. This controls the maximum amount of time to wait for the next request when keep-alives are enabled.Misc
Fixes
Dependency update
aec4784to9678844in /internal/witness/cmd/witness in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1518aec4784to9678844in /internal/witness/cmd/feeder in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1517aec4784to9678844in /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1513aec4784to9678844in /integration in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/151477726eftob89d9c9in /trillian/examples/deployment/docker/envsubst in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/151977726eftob89d9c9in /internal/witness/cmd/feeder in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15206c27802toaf9b40fin /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15446c27802toaf9b40fin /internal/witness/cmd/witness in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15486c27802toaf9b40fin /integration in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1547b89d9c9to0a4eaa0in /trillian/examples/deployment/docker/envsubst in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15460a4eaa0tobeefdbdin /trillian/examples/deployment/docker/envsubst in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1571c925d12to88e0a2ain /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15821a5326btodba79ebin /integration in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15841a5326btodba79ebin /internal/witness/cmd/feeder in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/15871a5326btodba79ebin /internal/witness/cmd/witness in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/158618d2f94to2341ddfin /integration in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/160218d2f94to2341ddfin /internal/witness/cmd/witness in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/159918d2f94to2341ddfin /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/160018d2f94to2341ddfin /internal/witness/cmd/feeder in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/16016ae5fe6to8fe31fbin /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in https://github.com/google/certificate-transparency-go/pull/1604v1.2.1Compare Source
Fixes
Dependency update
v1.2.0Compare Source
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
To reduce CT/Trillian database storage by deduplication of the entire issuance chain (intermediate certificate(s) and root certificate) that is currently stored in the Trillian merkle tree leaf ExtraData field. Storage cost should be reduced by at least 33% for new CT logs with this feature enabled. Currently only MySQL/MariaDB is supported to store the issuance chain in the CTFE database.
Existing logs are not affected by this change.
Log operators can choose to opt-in this change for new CT logs by adding new CTFE configs in the LogMultiConfig and importing the database schema. See example.
ctfe_storage_connection_stringextra_data_issuance_chain_storage_backendAn optional LRU cache can be enabled by providing the following flags.
cache_typecache_sizecache_ttlThis change is tested in Cloud Build tests using the
mysql:8.4Docker image as of the time of writing.PrecertChainEntryHashandCertificateChainHashfor TLS marshal/unmarshal in storage saving by @roger2hk in https://github.com/google/certificate-transparency-go/pull/1435Submission proxy: Root compatibility checking
Fixes
ResourceExhaustedfrom Trillian by @roger2hk in https://github.com/google/certificate-transparency-go/pull/1401Misc
Dependency update
5eae9efto28a7f1fin /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/13886699d28to7f9c058in /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/13916699d28to7f9c058in /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/13926699d28to7a392a2in /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/13936699d28to7a392a2in /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/13947a392a2tod996c64in /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/13957f9c058tod996c64in /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/13967a392a2tod996c64in /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/13977f9c058tod996c64in /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/139828a7f1fto611d30din /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/140648b942ato3451eecin /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/142148b942ato3451eecin /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/142348b942ato3451eecin /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/14203451eectob03f3bain /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/14263451eectob03f3bain /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/142548b942ato3451eecin /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/14223451eectob03f3bain /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/14273451eectob03f3bain /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/1428b03f3batod0902bain /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/1444b03f3batod0902bain /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/1443b03f3batod0902bain /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/1447b03f3batod0902bain /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/1445611d30dtod8d01e2in /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/1450d8d01e2to786007fin /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/1461go-version-inputto 1.21.10 in govulncheck.yml by @roger2hk in https://github.com/google/certificate-transparency-go/pull/14726d71b7ctoef27a3cin /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/14806d71b7ctoef27a3cin /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/14816d71b7ctoef27a3cin /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/14796d71b7ctoef27a3cin /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/1483ef27a3cto5c56bd4in /integration by @dependabot in https://github.com/google/certificate-transparency-go/pull/1484ef27a3cto5c56bd4in /internal/witness/cmd/witness by @dependabot in https://github.com/google/certificate-transparency-go/pull/1485ef27a3cto5c56bd4in /trillian/examples/deployment/docker/ctfe by @dependabot in https://github.com/google/certificate-transparency-go/pull/1486ef27a3cto5c56bd4in /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/1488c5b1261to58d02b4in /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/149158d02b4to77726efin /internal/witness/cmd/feeder by @dependabot in https://github.com/google/certificate-transparency-go/pull/1493v1.1.8Compare Source
Add support for AIX
Monitoring
Fixes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.