Updated package versions to resolve CVE (#23)

Author: deolank

.github/workflows/release.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.16
+          go-version: 1.22
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
         with:

dth/client.go

@@ -272,7 +272,7 @@ func (c *S3Client) listObjectFn(ctx context.Context, continuationToken, prefix,
 		input = &s3.ListObjectsV2Input{
 			Bucket:       &c.bucket,
 			Prefix:       prefix,
-			MaxKeys:      maxKeys,
+			MaxKeys: 	  aws.Int32(maxKeys),
 			Delimiter:    delimiter,
 			EncodingType: "url",
 			RequestPayer: types.RequestPayerRequester,
@@ -281,7 +281,7 @@ func (c *S3Client) listObjectFn(ctx context.Context, continuationToken, prefix,
 		input = &s3.ListObjectsV2Input{
 			Bucket:       &c.bucket,
 			Prefix:       prefix,
-			MaxKeys:      maxKeys,
+			MaxKeys: 	  aws.Int32(maxKeys),
 			Delimiter:    delimiter,
 			EncodingType: "url",
 		}
@@ -298,7 +298,7 @@ func (c *S3Client) listObjectFn(ctx context.Context, continuationToken, prefix,
 		return nil, err
 	}
 
-	if output.IsTruncated {
+	if output.IsTruncated != nil && *output.IsTruncated {
 		*continuationToken = *output.NextContinuationToken
 	} else {
 		*continuationToken = "End"
@@ -398,7 +398,7 @@ func (c *S3Client) ListObjects(ctx context.Context, continuationToken, prefix *s
 		}
 		result = append(result, &Object{
 			Key:  escapedPrefix,
-			Size: obj.Size,
+			Size: *obj.Size,
 		})
 	}
 
@@ -634,7 +634,7 @@ func (c *S3Client) UploadPart(ctx context.Context, key *string, body []byte, upl
 		Bucket:     &c.bucket,
 		Key:        key,
 		Body:       reader,
-		PartNumber: int32(partNumber),
+		PartNumber: aws.Int32(int32(partNumber)),
 		UploadId:   uploadID,
 		ContentMD5: &contentMD5,
 	}
@@ -662,7 +662,7 @@ func (c *S3Client) CompleteMultipartUpload(ctx context.Context, key, uploadID *s
 
 	for i, part := range parts {
 		cp := types.CompletedPart{
-			PartNumber: int32(part.partNumber),
+			PartNumber: aws.Int32(int32(part.partNumber)),
 			ETag:       part.etag,
 		}
 		completedPart[i] = cp
@@ -698,7 +698,7 @@ func (c *S3Client) ListParts(ctx context.Context, key, uploadID *string) (parts
 		Bucket:   &c.bucket,
 		Key:      key,
 		UploadId: uploadID,
-		MaxParts: 1000,
+		MaxParts: aws.Int32(1000),
 	}
 
 	parts = make(map[int]*Part, 10000)
@@ -713,12 +713,12 @@ func (c *S3Client) ListParts(ctx context.Context, key, uploadID *string) (parts
 		for _, part := range output.Parts {
 			// log.Printf("Found Part %d - etag %s", part.PartNumber, *part.ETag)
 			etag := strings.Trim(*part.ETag, "\"")
-			parts[int(part.PartNumber)] = &Part{
-				partNumber: int(part.PartNumber),
+			parts[int(*part.PartNumber)] = &Part{
+				partNumber: int(*part.PartNumber),
 				etag:       &etag,
 			}
 		}
-		if !output.IsTruncated {
+		if output.IsTruncated == nil || !*output.IsTruncated {
 			break
 		}
 		input.PartNumberMarker = output.NextPartNumberMarker

go.mod

@@ -1,19 +1,52 @@
 module golang.a2z.com/dthcli
 
-go 1.16
+go 1.22
 
 require (
-	github.com/aws/aws-sdk-go-v2 v1.21.0
-	github.com/aws/aws-sdk-go-v2/config v1.6.1
-	github.com/aws/aws-sdk-go-v2/credentials v1.3.3
-	github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.1.1
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.4.1
-	github.com/aws/aws-sdk-go-v2/service/dynamodb v1.3.1
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.13.0
-	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.3.1
-	github.com/aws/aws-sdk-go-v2/service/sfn v1.19.5
-	github.com/aws/aws-sdk-go-v2/service/sqs v1.4.1
-	github.com/aws/smithy-go v1.14.2
-	github.com/spf13/cobra v1.1.3
-	github.com/spf13/viper v1.7.1
+	github.com/aws/aws-sdk-go-v2 v1.36.3
+	github.com/aws/aws-sdk-go-v2/config v1.29.10
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.63
+	github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.12.12
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.67
+	github.com/aws/aws-sdk-go-v2/service/dynamodb v1.42.0
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.78.2
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.35.2
+	github.com/aws/aws-sdk-go-v2/service/sfn v1.35.2
+	github.com/aws/aws-sdk-go-v2/service/sqs v1.38.1
+	github.com/aws/smithy-go v1.22.3
+	github.com/spf13/cobra v1.9.1
+	github.com/spf13/viper v1.20.0
+)
+
+require (
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
+	github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.18.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.10.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.25.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.29.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.33.17 // indirect
+	github.com/fsnotify/fsnotify v1.8.0 // indirect
+	github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
+	github.com/sagikazarmark/locafero v0.7.0 // indirect
+	github.com/sourcegraph/conc v0.3.0 // indirect
+	github.com/spf13/afero v1.12.0 // indirect
+	github.com/spf13/cast v1.7.1 // indirect
+	github.com/spf13/pflag v1.0.6 // indirect
+	github.com/subosito/gotenv v1.6.0 // indirect
+	go.uber.org/atomic v1.9.0 // indirect
+	go.uber.org/multierr v1.9.0 // indirect
+	golang.org/x/sys v0.29.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )