upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-06-27 01:50:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 11
vault/api/go.mod

43 lines
1.6 KiB
Modula-2
Raw Normal View History

Create sdk/ and api/ submodules (#6583)
2019-04-12 17:54:35 -04:00
module github.com/hashicorp/vault/api
Bump the sdk go version to 1.20, document when go versions should be updated (#20278)
2023-04-24 08:44:39 -04:00
// The Go version directive for the api package should normally only be updated when
// code in the api package requires a newer Go version to build. It should not
// automatically track the Go version used to build Vault itself. Many projects import
// the api module and we don't want to impose a newer version on them any more than we
// have to.
go: bump to Go v1.26.3 on main (#14645) (#14659) * go: bump to Go v1.26.3 * go: upgrade golang.org/x/net to resolve GO-2026-4918 Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-05-08 12:03:59 -04:00
go 1.25.0
Create sdk/ and api/ submodules (#6583)
2019-04-12 17:54:35 -04:00
require (
Bump backoff/v3 to backoff/v4 (#26868) This makes it so projects that are already using backoff don't need to pull up an old version of it just because of vault/api. This major version change is compatible with existing usage in code. Refs #24707. Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2024-05-29 12:04:46 -04:00
github.com/cenkalti/backoff/v4 v4.3.0
Backport [VAULT-43813] go: resolve CVE-2026-34986 and GHSA-78h2-9frx-2jm8 by upgrading github.com/go-jose/go-jose into ce/main go: resolve CVE-2026-34986 and CVE-2026-34986 by upgrading github.com/go-jose/go-jose Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-04-07 07:33:44 -04:00
github.com/go-jose/go-jose/v4 v4.1.4
Dependency updates for main (#31299) * Dependency updates for main * go mod tidy
2025-07-17 11:30:11 -04:00
github.com/go-test/deep v1.1.1
Move awsutil over to the go-secure-stdlib version (#12128) Unlike the other libraries that were migrated, there are no usages of this lib in any of our plugins, and the only other known usage was in go-kms-wrapping, which has been updated. Aliasing it like the other libs would still keep the aws-sdk-go dep in the sdk module because of the function signatures. So I've simply removed it entirely here.
2021-07-20 20:42:00 -04:00
github.com/hashicorp/errwrap v1.1.0
Add helper for encoding/decoding root tokens and OTP generation in SDK module (#10504) (#10505)
2021-12-01 08:05:49 -05:00
github.com/hashicorp/go-cleanhttp v0.5.2
Update vault-plugin-database-elasticsearch to v0.15.0 (#27136) * Update vault-plugin-database-elasticsearch to v0.15.0 * Add changelog * fix failing tests + update dep in api dir --------- Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com> Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com> Co-authored-by: Zlaticanin <zlaticaninmilena@gmail.com>
2024-05-22 13:47:08 -04:00
github.com/hashicorp/go-hclog v1.6.3
Move awsutil over to the go-secure-stdlib version (#12128) Unlike the other libraries that were migrated, there are no usages of this lib in any of our plugins, and the only other known usage was in go-kms-wrapping, which has been updated. Aliasing it like the other libs would still keep the aws-sdk-go dep in the sdk module because of the function signatures. So I've simply removed it entirely here.
2021-07-20 20:42:00 -04:00
github.com/hashicorp/go-multierror v1.1.1
VAULT-36112: Better handling for Retry-After rate limit header. (#30887) * round up * round up, test, update backoff * add external test * changelog * use released version of go-retryablehttp * update api version of go-retryablehttp * fix name
2025-06-19 05:22:11 -04:00
github.com/hashicorp/go-retryablehttp v0.7.8
VLT091 plugin testing framework stepwise (#9270) * Resolve merge conflicts and updates from running a test * move testing/_test.go over to legacy * updates * Add core of plugin test framework Stepwise (#9166) * adding stepwise testing, but there are protocol buff error :/ * move file and update sdk/go.mo * update/sync modules * update from other branch * update sdk/go.mod * some cleanups after feedback * remove enviornments from this PR * update vendor * change from running go mod tidy * change from go mod tidy * Update sdk/testing/stepwise/helpers.go Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * Update sdk/testing/stepwise/helpers.go Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * change panic to error * Update sdk/testing/stepwise/helpers.go return `nil` and not `err` at the end Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * Defer close() on successful Open of a file * document the re-creation of steps * Update sdk/testing/stepwise/stepwise.go Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * remove unused BarrierKeys() * Update sdk/testing/stepwise/stepwise.go Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * updates from feedback * fix return with bad arguments * Rename things: - StepOperation -> Operation - StepwiseEnvironment -> Environment - StepCheckFunc -> AssertionFunc - step.Check -> step.Assert * document the environment interface methods * rename EnvironmentOptions to MountOptions * rename Name to RegistryName * remove ExpectError because it's redundant * minor doc update * Update sdk/testing/stepwise/stepwise.go Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * add checkShouldRun function * remove redundant return * remove vestigial PreCheck function * add tt.Helper() to makeRequest * minor code formatting and document 1-based index for log output of Steps Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> * minor updates * update sdk * use local reference for api, vault dep * Update sdk/testing/stepwise/stepwise.go Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com> * Update sdk/testing/stepwise/stepwise.go Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com> * cleanup some defer functions * call fatal if environment setup fails, and don't call teardown * defer re-setting client token in makeRequest * Move legacy logicaltest back to testhelpers * update mods and test files with go mod tidy * go mod vendor * remove relative replace directives * restore old logical test location * move declaration to main stepwise file * remove index var and use i+1 * add testing for write, delete paths of makeRequest * update stepwise core testing to do request counting * remove unused methods * Update sdk/testing/stepwise/stepwise.go remove dead line Co-authored-by: Alexander Bezobchuk <alexanderbez@users.noreply.github.com> * Update sdk/testing/stepwise/stepwise.go fix capitalization in code comment Co-authored-by: Alexander Bezobchuk <alexanderbez@users.noreply.github.com> * update code comments for SkipTeardown to clarify its use * update stepwise Co-authored-by: Michael Golowka <72365+pcman312@users.noreply.github.com> Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com> Co-authored-by: Alexander Bezobchuk <alexanderbez@users.noreply.github.com>
2020-06-23 07:01:39 -04:00
github.com/hashicorp/go-rootcerts v1.0.2
Dependency updates for main (#31299) * Dependency updates for main * go mod tidy
2025-07-17 11:30:11 -04:00
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0
Make API not depend on SDK (#18962)
2023-02-06 09:41:56 -05:00
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
VAULT-32657 deprecate duplicate attributes in HCL configs and policies (#30386) * upgrade hcl dependency on api pkg This upgrades the hcl dependency for the API pkg, and adapts its usage so users of our API pkg are not affected. There's no good way of communicating a warning via a library call so we don't. The tokenHelper which is used by all Vault CLI commands in order to create the Vault client, as well as directly used by the login and server commands, is implemented on the api pkg, so this upgrade also affects all of those commands. Seems like this was only moved to the api pkg because the Terraform provider uses it, and I thought creating a full copy of all those files back under command would be too much spaghetti. Also leaving some TODOs to make next deprecation steps easier. * upgrade hcl dependency in vault and sdk pkgs * upgrade hcl dependency in vault and sdk pkgs * add CLI warnings to commands that take a config - vault agent (unit test on CMD warning) - vault proxy (unit test on CMD warning) - vault server (no test for the warning) - vault operator diagnose (no tests at all, uses the same function as vault server * ignore duplicates on ParseKMSes function * Extend policy parsing functions and warn on policy store * Add warning on policy fmt with duplicate attributes * Add warnings when creating/updating policy with duplicate HCL attrs * Add log warning when switchedGetPolicy finds duplicate attrs Following operations can trigger this warning when they run into a policy with duplicate attributes: * replication filtered path namespaces invalidation * policy read API * building an ACL (for many different purposes like most authZ operations) * looking up DR token policies * creating a token with named policies * when caching the policies for all namespaces during unseal * Print log warnings when token inline policy has duplicate attrs No unit tests on these as new test infra would have to be built on all. Operations affected, which will now print a log warning when the retrieved token has an inline policy with duplicate attributes: * capabilities endpoints in sys mount * handing events under a subscription with a token with duplicate attrs in inline policies * token used to create another token has duplicate attrs in inline policies (sudo check) * all uses of fetchACLTokenEntryAndEntity when the request uses a token with inline policies with duplicate attrs. Almost all reqs are subject to this * when tokens are created with inline policies (unclear exactly how that can happen) * add changelog and deprecation notice * add missing copywrite notice * fix copy-paste mistake good thing it was covered by unit tests * Fix manual parsing of telemetry field in SharedConfig This commit in the hcl library was not in the v1.0.1-vault-5 version we're using but is included in v1.0.1-vault-7: https://github.com/hashicorp/hcl/commit/e80118accb521e47bc5b93104bf46c67d89d2242 This thing of reusing when parsing means that our approach of manually re-parsing fields on top of fields that have already been parsed by the hcl annotation causes strings (maybe more?) to concatenate. Fix that by removing annotation. There's actually more occurrences of this thing of automatically parsing something that is also manually parsing. In some places we could just remove the boilerplate manual parsing, in others we better remove the auto parsing, but I don't wanna pull at that thread right now. I just checked that all places at least fully overwrite the automatically parsed field instead of reusing it as the target of the decode call. The only exception is the AOP field on ent but that doesn't have maps or slices, so I think it's fine. An alternative approach would be to ensure that the auto-parsed value is discarded, like the current parseCache function does note how it's template not templates * Fix linter complaints * Update command/base_predict.go Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com> * address review * remove copywrite headers * re-add copywrite headers * make fmt * Update website/content/partials/deprecation/duplicate-hcl-attributes.mdx Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com> * Update website/content/partials/deprecation/duplicate-hcl-attributes.mdx Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com> * Update website/content/partials/deprecation/duplicate-hcl-attributes.mdx Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com> * undo changes to deprecation.mdx * remove deprecation doc * fix conflict with changes from main --------- Co-authored-by: Mike Palmiotto <mike.palmiotto@hashicorp.com> Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-05-23 15:02:07 -04:00
github.com/hashicorp/hcl v1.0.1-vault-7
Move CLI token helper to api module (#25744) * Move command/config + command/token to api/cliconfig + api/tokenhelper * Remove unused functions and unused import * Simplify and inline function copied from SDK * Delete unused duplicated/forwarding config implementation from command package * Delete unused code, unexport API surface that's only used internally to the package * Fix up license headers * Add changelog * Tweak .gitignore to track hcl files in testdata/ folders
2024-03-04 13:29:20 -05:00
github.com/mitchellh/go-homedir v1.1.0
Update parseutil in API, SDK (#15465) Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-05-17 11:44:32 -04:00
github.com/mitchellh/mapstructure v1.5.0
Move CLI token helper to api module (#25744) * Move command/config + command/token to api/cliconfig + api/tokenhelper * Remove unused functions and unused import * Simplify and inline function copied from SDK * Delete unused duplicated/forwarding config implementation from command package * Delete unused code, unexport API surface that's only used internally to the package * Fix up license headers * Add changelog * Tweak .gitignore to track hcl files in testdata/ folders
2024-03-04 13:29:20 -05:00
github.com/natefinch/atomic v1.0.1
Update go-jose to v3.0.4/v4.0.5 (#29771) * Update go-jose to v3.0.4 - Updating to address CVE-2025-27144 * Update v4 references in sdk and api * Update go-jose across all api auth projects to v4.0.5
2025-02-28 11:15:59 -05:00
github.com/stretchr/testify v1.10.0
VAULT-45516 & 45517/ Resolve vulns in golang.org/x/crypto@v0.51.0 & golang.org/x/net@v0.54.0 (#14995) (#15005) * bumped crypto dep and ran go mod tidy * bumped net and ran go mod tidy * bumped net in api from 53 to 55 and ran go mod tidy * added changelog * bump deps for all go modules --------- Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: kelly <69541941+kporter101@users.noreply.github.com> Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-05-27 10:21:19 -04:00
golang.org/x/net v0.55.0
Dependency updates for main (#31299) * Dependency updates for main * go mod tidy
2025-07-17 11:30:11 -04:00
golang.org/x/time v0.12.0
Create sdk/ and api/ submodules (#6583)
2019-04-12 17:54:35 -04:00
)
Update minimum required go version for api (#15915) * Update minimum required go version for api * Update root go.mod to use latest sdk
2022-06-09 16:15:18 -04:00
require (
VAULT-22504: Support Custom Messages in api Package (#24959) * add methods in Sys struct to manipulate UI Custom Messages * adding go-docs * extracting recurring URL path into a constant * using same stretchr/testify version as the main go.mod
2024-01-23 13:20:58 -05:00
github.com/davecgh/go-spew v1.1.1 // indirect
Dependency updates for main (#31299) * Dependency updates for main * go mod tidy
2025-07-17 11:30:11 -04:00
github.com/fatih/color v1.18.0 // indirect
github.com/hashicorp/go-sockaddr v1.0.7 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
Move CLI token helper to api module (#25744) * Move command/config + command/token to api/cliconfig + api/tokenhelper * Remove unused functions and unused import * Simplify and inline function copied from SDK * Delete unused duplicated/forwarding config implementation from command package * Delete unused code, unexport API surface that's only used internally to the package * Fix up license headers * Add changelog * Tweak .gitignore to track hcl files in testdata/ folders
2024-03-04 13:29:20 -05:00
github.com/mattn/go-isatty v0.0.20 // indirect
VAULT-22504: Support Custom Messages in api Package (#24959) * add methods in Sys struct to manipulate UI Custom Messages * adding go-docs * extracting recurring URL path into a constant * using same stretchr/testify version as the main go.mod
2024-01-23 13:20:58 -05:00
github.com/pmezard/go-difflib v1.0.0 // indirect
Update minimum required go version for api (#15915) * Update minimum required go version for api * Update root go.mod to use latest sdk
2022-06-09 16:15:18 -04:00
github.com/ryanuber/go-glob v1.0.0 // indirect
VAULT-45516 & 45517/ Resolve vulns in golang.org/x/crypto@v0.51.0 & golang.org/x/net@v0.54.0 (#14995) (#15005) * bumped crypto dep and ran go mod tidy * bumped net and ran go mod tidy * bumped net in api from 53 to 55 and ran go mod tidy * added changelog * bump deps for all go modules --------- Signed-off-by: Ryan Cragun <me@ryan.ec> Co-authored-by: kelly <69541941+kporter101@users.noreply.github.com> Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-05-27 10:21:19 -04:00
golang.org/x/sys v0.45.0 // indirect
golang.org/x/text v0.37.0 // indirect
VAULT-22504: Support Custom Messages in api Package (#24959) * add methods in Sys struct to manipulate UI Custom Messages * adding go-docs * extracting recurring URL path into a constant * using same stretchr/testify version as the main go.mod
2024-01-23 13:20:58 -05:00
gopkg.in/yaml.v3 v3.0.1 // indirect
Update minimum required go version for api (#15915) * Update minimum required go version for api * Update root go.mod to use latest sdk
2022-06-09 16:15:18 -04:00
)
Reference in a new issue Copy permalink