chore(deps): update gomod (#58)

- bump all packages that are compatible with current code.
- migrate from prior deleted jwt repo to the new public copy
- protobuf and grpc have incompatible changes with current code and require development effort in future: related AB#548696
- Tests pass.
- Remove toolchain reference to maximize renovate compatibility.
- release using latest go version in build environment.

Co-authored-by: mend-for-github-com[bot] <50673670+mend-for-github-com[bot]@users.noreply.github.com>
Co-authored-by: Sheldon Hull <[email protected]>
Co-authored-by: Andrii Zakurenyi <[email protected]>

CHANGELOG.md

@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and is generated by [Changie](https://github.com/miniscruff/changie).
 
+## v1.0.2 - 2024-01-18
+
+### ⬆️ Dependencies
+
+- Bump dependencies.
+  Migrate to public maintained jwt repo since original was deleted from github.
+
 ## v1.0.1 - 2023-08-09
 
 ### 📘 Docs

charts/dsv-k8s-controller/Chart.yaml

@@ -30,7 +30,7 @@ keywords:
   - vault
 type: application
 # WARNING: Version should be bumped by changie, not manually.
-version: v1.0.1
+version: v1.0.2
 appVersion: latest
 maintainers:
   - name: Delinea DSV Team

charts/dsv-k8s-sidecar/Chart.yaml

@@ -29,7 +29,7 @@ keywords:
   - vault
 type: application
 # WARNING: Version should be bumped by changie, not manually.
-version: v1.0.1
+version: v1.0.2
 appVersion: latest
 maintainers:
   - name: Delinea DSV Team

go.mod

@@ -1,47 +1,46 @@
 module github.com/DelineaXPM/dsv-k8s-sidecar
 
-go 1.18
+go 1.21
 
 require (
-	github.com/bitfield/script v0.21.4
-	github.com/dgrijalva/jwt-go/v4 v4.0.0-preview1
+	github.com/bitfield/script v0.22.0
 	github.com/ericchiang/k8s v1.2.0
+	github.com/golang-jwt/jwt/v5 v5.2.0
 	github.com/golang/mock v1.6.0
 	github.com/golang/protobuf v1.2.0
-	github.com/gorilla/mux v1.8.0
-	github.com/magefile/mage v1.14.0
-	github.com/pterm/pterm v0.12.58
-	github.com/sheldonhull/magetools v1.0.0
-	github.com/sirupsen/logrus v1.2.0
-	github.com/stretchr/testify v1.8.2
+	github.com/gorilla/mux v1.8.1
+	github.com/magefile/mage v1.15.0
+	github.com/pterm/pterm v0.12.75
+	github.com/sheldonhull/magetools v1.0.1
+	github.com/sirupsen/logrus v1.9.3
+	github.com/stretchr/testify v1.8.4
 	google.golang.org/grpc v1.16.0
 )
 
 require (
-	atomicgo.dev/cursor v0.1.1 // indirect
+	atomicgo.dev/schedule v0.1.0 // indirect
+	mvdan.cc/sh/v3 v3.7.0 // indirect
+)
+
+require (
+	atomicgo.dev/cursor v0.2.0 // indirect
 	atomicgo.dev/keyboard v0.2.9 // indirect
-	bitbucket.org/creachadair/shell v0.0.7 // indirect
 	github.com/containerd/console v1.0.3 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/dustin/go-humanize v1.0.0 // indirect
-	github.com/gookit/color v1.5.3 // indirect
-	github.com/itchyny/gojq v0.12.7 // indirect
-	github.com/itchyny/timefmt-go v0.1.3 // indirect
-	github.com/konsorten/go-windows-terminal-sequences v1.0.1 // indirect
-	github.com/kr/pretty v0.2.1 // indirect
-	github.com/lithammer/fuzzysearch v1.1.5 // indirect
-	github.com/logrusorgru/aurora v2.0.3+incompatible // indirect
-	github.com/mattn/go-runewidth v0.0.14 // indirect
+	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/gookit/color v1.5.4 // indirect
+	github.com/itchyny/gojq v0.12.14 // indirect
+	github.com/itchyny/timefmt-go v0.1.5 // indirect
+	github.com/lithammer/fuzzysearch v1.1.8 // indirect
+	github.com/mattn/go-runewidth v0.0.15 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/rivo/uniseg v0.4.4 // indirect
 	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
-	github.com/ztrue/tracerr v0.3.0 // indirect
-	golang.org/x/crypto v0.17.0 // indirect
-	golang.org/x/mod v0.8.0 // indirect
-	golang.org/x/net v0.17.0 // indirect; indirect // indirect
-	golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 // indirect
-	golang.org/x/sys v0.15.0 // indirect
-	golang.org/x/term v0.15.0 // indirect
+	github.com/ztrue/tracerr v0.4.0 // indirect
+	golang.org/x/mod v0.14.0 // indirect
+	golang.org/x/net v0.20.0 // indirect; indirect // indirect
+	golang.org/x/sys v0.16.0 // indirect
+	golang.org/x/term v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect

pkg/auth/service.go

@@ -7,7 +7,7 @@ import (
 
 	"github.com/DelineaXPM/dsv-k8s-sidecar/pkg/pods"
 
-	"github.com/dgrijalva/jwt-go/v4"
+	"github.com/golang-jwt/jwt/v5"
 	"github.com/sirupsen/logrus"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/codes"

vendor/atomicgo.dev/cursor/.golangci.yml

@@ -17,55 +17,83 @@ linters-settings:
       - ptrToRefParam
       - paramTypeCombine
       - unnamedResult
-  misspell:
-    locale: US
 linters:
   disable-all: true
   enable:
+    # default linters
     - errcheck
     - gosimple
     - govet
     - ineffassign
     - staticcheck
+    - typecheck
+    - unused
+    # additional linters
+    - asasalint
     - asciicheck
+    - bidichk
     - bodyclose
+    - containedctx
+    - contextcheck
+    - decorder
     - dupl
     - durationcheck
+    - errchkjson
+    - errname
     - errorlint
     - exhaustive
-    - gci
-    - gocognit
+    - exhaustruct
+    - exportloopref
+    - forcetypeassert
+    - gocheckcompilerdirectives
     - gocritic
     - godot
     - godox
     - goerr113
     - gofmt
-    - goimports
     - goprintffuncname
-    - misspell
+    - gosec
+    - gosmopolitan
+    - importas
+    - ireturn
+    - nakedret
+    - nestif
     - nilerr
-    - nlreturn
-    - noctx
+    - nilnil
     - prealloc
     - predeclared
+    - revive
+    - rowserrcheck
+    - tagalign
+    - tenv
     - thelper
+    - tparallel
     - unconvert
     - unparam
+    - usestdlibvars
     - wastedassign
+    - whitespace
     - wrapcheck
+    - wsl
+    - gocyclo
+    - misspell
 issues:
-  # Excluding configuration per-path, per-linter, per-text and per-source
+  include:
+    - EXC0012
+    - EXC0014
   exclude-rules:
     - path: _test\.go
       linters:
+        - gocyclo
         - errcheck
         - dupl
+        - gosec
         - gocritic
-        - wrapcheck
-        - goerr113
-    # https://github.com/go-critic/go-critic/issues/926
     - linters:
         - gocritic
       text: "unnecessaryDefer:"
+    - linters:
+        - gocritic
+      text: "preferDecodeRune:"
 service:
-  golangci-lint-version: 1.39.x # use the fixed version to not introduce new linters unexpectedly
+  golangci-lint-version: 1.53.x