Chore/update kubo 0.29.0
This PR updates kubo to v0.29.0 and its dependencies.
Because there are a lot a break changes between the previous version and this new one, a lot of fixes were made in this PR.
The gRPC package deprecated DialContext in favor of NewClient, the DNS resolver should be explicitly used: https://stackoverflow.com/questions/78485578/how-to-use-the-bufconn-package-with-grpc-newclient
We removed gogoproto for the API generation, but copied from it the utility functions to read/write proto messages, into the new package protoio. The API is now generated with the official Golang protoc plugin instead of gogoproto.
:warning: We detected 20 security issues in this pull request:
Insecure Access Control (1)
| Severity | Details | Docs |
|---|---|---|
| High | Title: Missing User Instruction https://github.com/berty/weshnet/blob/3a83c6630c5cef5d9c2acc2041650945bc4b0cfb/tool/docker-protoc/Dockerfile#L4 |
:books: |
More info on how to fix Insecure Access Control in Dockerfile.
Vulnerable Libraries (19)
More info on how to fix Vulnerable Libraries in Go.
👉 Go to the dashboard for detailed results.
📥 Happy? Share your feedback with us.