Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
The new release fixes one of the outstanding CVEs against oauth2_proxy:
https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-5m6c-jp6f-2vcv.
In addition, rename the owner and the project name to reflect the
changes upstream (it now belongs to the oauth2-proxy organization, and
the name is oauth2-proxy)
|
|
This update fixes CVE https://nvd.nist.gov/vuln/detail/CVE-2020-11053.
In addition, switch to using `buildGoModule` as the project switched to
go 1.14 and go modules.
|
|
Per request from the current maintainer.
|
|
No NixOS tests yet, but this is better than nothing.
|
|
v3.2.0 is 11 months old.
v5.1.0 brings new providers and fixes security vulnerabilities. In addition, the
project switched to go 1.14 and uses go modules, which is now reflected in the
build process.
NOTE: There are many breaking changes, which are then reflected in the NixOS
services configuration.
|
|
|
|
* treewide: remove unused variables
* making ofborg happy
|
|
after bitly repo was frozen, pusher is now the official hard fork
https://github.com/bitly/oauth2_proxy/issues/628
|
|
|
|
https://github.com/NixOS/nixpkgs/pull/17254#issuecomment-245295541
* update docs to describe `deps.nix`
* include goDeps in nix-shell GOPATH
* NixOS 16.09 rel notes about replacing goPackages
|
|
After #16017 there were a lot
of comments saying that `nix` would be better than `JSON`
for Go packages dependency sets.
As said in https://github.com/NixOS/nixpkgs/pull/16017#issuecomment-229624046
> Because of the content-addressable store, if two programs have the
> same dependency it will already result in the same derivation in
> the
> store. Git also has compression in the pack files so it won't make
> much difference to duplicate the dependencies on disk. And finally
> most users will just use the binary builds so it won't make any
> differences to them.
This PR removes `libs.json` file and puts all package dependencies in
theirs `deps.json`.
|
|
|
|
|