Skip to content

Commit d378447

Browse files
committed
[vendor] remove jwt/v4 pin
the jwt/v4 replacement no longer needed go mod graph | grep "golang-jwt/jwt/v4" shows no transitive dependencies.
1 parent b5ce354 commit d378447

2 files changed

Lines changed: 2 additions & 6 deletions

File tree

go.mod

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,8 @@ module github.com/openshift/windows-machine-config-operator
22

33
go 1.25.7
44

5-
replace (
6-
// fix CVE-2025-30204 transitive deps still using older v4. Remove once `go mod graph` shows only 4.5.2 or higher
7-
github.com/golang-jwt/jwt/v4 => github.com/golang-jwt/jwt/v4 v4.5.2
8-
github.com/golang-jwt/jwt/v5 => github.com/golang-jwt/jwt/v5 v5.2.2
9-
)
5+
// fix CVE-2025-30204 transitive deps still using older v4. Remove once `go mod graph` shows only 4.5.2 or higher
6+
replace github.com/golang-jwt/jwt/v5 => github.com/golang-jwt/jwt/v5 v5.2.2
107

118
require (
129
github.com/apparentlymart/go-cidr v1.1.0

vendor/modules.txt

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1482,5 +1482,4 @@ sigs.k8s.io/structured-merge-diff/v6/value
14821482
## explicit; go 1.22
14831483
sigs.k8s.io/yaml
14841484
sigs.k8s.io/yaml/kyaml
1485-
# github.com/golang-jwt/jwt/v4 => github.com/golang-jwt/jwt/v4 v4.5.2
14861485
# github.com/golang-jwt/jwt/v5 => github.com/golang-jwt/jwt/v5 v5.2.2

0 commit comments

Comments
 (0)