mirror of
https://github.com/tailscale/tailscale.git
synced 2026-11-09 14:05:36 +09:00
Tom Proctor
594d5bb04e
Our transitive dependency on github.com/containerd/containerd and x/crypto/openpgp was causing govulncheck failures. Bumping helm resolves our only dependency graph routes to those packages. However, it also bumps sigs.k8s.io/controller-runtime to v0.24.1 which included stricter vet checks for Eventf, so this PR also fixes up instances where we call that method without a format string arg. Resolves the following advisories; GO-2026-5932, GO-2026-5758, GO-2026-5475, GO-2026-5378, GO-2026-5622, GO-2026-5338, GO-2026-5064. Updates tailscale/corp#9497 Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
20 lines
788 B
Nix
20 lines
788 B
Nix
# This is a shell.nix file used to describe the environment that
|
|
# tailscale needs for development.
|
|
#
|
|
# For more information about this and why this file is useful, see here:
|
|
# https://nixos.org/guides/nix-pills/developing-with-nix-shell.html
|
|
#
|
|
# Also look into direnv: https://direnv.net/, this can make it so that you can
|
|
# automatically get your environment set up when you change folders into the
|
|
# project.
|
|
(import (
|
|
let
|
|
lock = builtins.fromJSON (builtins.readFile ./flake.lock);
|
|
in fetchTarball {
|
|
url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
|
|
sha256 = lock.nodes.flake-compat.locked.narHash; }
|
|
) {
|
|
src = ./.;
|
|
}).shellNix
|
|
# nix-direnv cache busting line: sha256-VzrPE9vNDJUNLGZO5ZCrHaEFwZsouhtbpg9rH+WEQ/A=
|