Commit Graph

6 Commits

Author SHA1 Message Date
guangwu 6abb668205 Fix typos (#6135)
Fix typos

Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>
2023-08-02 10:05:57 +02:00
guangwu d3811e29eb fix: CVE-2022-3517 (#5941)
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>
2023-05-25 16:09:31 +02:00
dependabot[bot] 3d87ae71f6 build(deps): bump json5 in /internal/gqlparser/validator/imported (#5513)
Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-02 09:30:25 +01:00
Philip Conrad e45c79a619 build(deps): upgrade internal/gqlparser to v2.5.1 (#5159)
* internal/gqlparser: Upgrade to v2.5.1+ of the lib.
* internal/gqlparser: Add column offset to error messages.
* topdown/graphql: Refactor error message handling for gqlparser v2.5.1.
* internal/gqlparser: Remove broken tests.
* internal/gqlparser: Fix style nits.

Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
2022-09-21 10:49:33 +02:00
Philip Conrad b2d92a33c1 Add prealloc linter check + linter fixes (#5139)
This commit adds the `prealloc` linter to the list of linters for OPA, and fixes up the miscellaneous locations in the code that the linter found where we could easily preallocate slices.

Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
2022-09-15 15:09:54 -04:00
Philip Conrad 45a3d8ee70 internal: Vendor gqlparser library. (#5067)
This commit addresses issues around vendoring the 3rd party GraphQL
parser library, `vektah/gqlparser`, which is used by our GraphQL builtins.

By directly depending on the library, we accidentally forced all of our
library users to have to match `gqlparser` versions, which could cause
problems if they wanted to use downstream GraphQL libraries.

To fix this version clash problem, this PR internalizes `vektah/gqlparser`
v2.4.8 into the `internal/gqlparser` package (we can update to v2.5.0
later). Scripts are included to automate some of the internalizing
process if we wish to update the library in the future.

Fixes: #5065

Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
2022-08-30 14:47:39 -04:00