Update sjson & gjson to address CVE-2021-42836

Signed-off-by: Dibyo Mukherjee <dibyo@google.com>
tektoncd · Oct 27, 2021 · dd6d754 · dd6d754
1 parent b44b8d3
commit dd6d754
Show file tree

Hide file tree

Showing 10 changed files with 319 additions and 171 deletions.
diff --git a/go.mod b/go.mod
@@ -15,7 +15,7 @@ require (
 	github.com/spf13/cobra v1.2.1
 	github.com/tektoncd/pipeline v0.27.1-0.20210830154614-c8c729131d4a
 	github.com/tektoncd/plumbing v0.0.0-20210514044347-f8a9689d5bd5
-	github.com/tidwall/sjson v1.2.1
+	github.com/tidwall/sjson v1.2.3
 	go.opencensus.io v0.23.0
 	go.uber.org/zap v1.19.0
 	golang.org/x/mod v0.5.0 // indirect

diff --git a/vendor/github.com/tidwall/gjson/README.md b/vendor/github.com/tidwall/gjson/README.md
diff --git a/vendor/github.com/tidwall/gjson/SYNTAX.md b/vendor/github.com/tidwall/gjson/SYNTAX.md
diff --git a/vendor/github.com/tidwall/gjson/gjson.go b/vendor/github.com/tidwall/gjson/gjson.go