bump deps/sdk, fix: potential security risks

Author: honwen

.dockerignore

@@ -1,12 +1,2 @@
-# Compiled Object files, Static and Dynamic libs (Shared Objects)
-*.o
-*.a
-*.so
-
-.vscode/
-.github/
-release/
-build/
-vendor/
-
-Dockerfile
+*
+.*

.github/workflows/build.yaml

@@ -14,11 +14,11 @@ jobs:
     env:
       GO111MODULE: "on"
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v3
 
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v3
         with:
-          go-version: ^1.18.1
+          go-version: '1.18.3'
 
       - name: Prepare environment
         run: |-
@@ -29,7 +29,7 @@ jobs:
 
       # Test
       - name: Unit Testing
-        run: go test .
+        run: go test -v .
 
       # Win
       - run: GOOS=windows GOARCH=386 VERSION=${RELEASE_VERSION} make release

alidns/AddDomainRecord_test.go

@@ -11,7 +11,7 @@ func TestAddDomainRecord(t *testing.T) {
 		RR:         "testaddrecord",
 		Type:       ARecord,
 		Value:      "8.8.8.8",
-		TTL:        "600"
+		TTL:        "600",
 	}
 	response, err := client.AddDomainRecord(&addDomainRecordArgs)
 	if err == nil {

go.mod

@@ -3,47 +3,44 @@ module github.com/honwen/aliyun-ddns-cli
 go 1.18
 
 require (
-	github.com/denverdino/aliyungo v0.0.0-20220419071826-816031062a6e
-	github.com/honwen/golibs v0.3.1
-	github.com/honwen/ip2loc v0.2.2
-	github.com/stretchr/testify v1.7.1
-	github.com/urfave/cli v1.22.5
+	// locked before tracing/logging https://github.com/denverdino/aliyungo/commits/master/go.mod
+	github.com/denverdino/aliyungo v0.0.0-20220321085828-46dabbd9e212
+	github.com/honwen/golibs v0.4.0
+	github.com/honwen/ip2loc v0.2.4
+	github.com/urfave/cli v1.22.9
+	github.com/ysmood/got v0.31.2
 )
 
 require (
-	github.com/AdguardTeam/golibs v0.4.2 // indirect
+	github.com/AdguardTeam/golibs v0.10.9 // indirect
 	github.com/PuerkitoBio/goquery v1.8.0 // indirect
 	github.com/Workiva/go-datastructures v1.0.53 // indirect
 	github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
 	github.com/aead/poly1305 v0.0.0-20180717145839-3fee0db0b635 // indirect
-	github.com/ameshkov/dnscrypt/v2 v2.2.1 // indirect
+	github.com/ameshkov/dnscrypt/v2 v2.2.3 // indirect
 	github.com/ameshkov/dnsstamps v1.0.3 // indirect
 	github.com/andybalholm/cascadia v1.3.1 // indirect
 	github.com/cheekybits/genny v1.0.0 // indirect
 	github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d // indirect
-	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/fsnotify/fsnotify v1.5.1 // indirect
 	github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 // indirect
-	github.com/lucas-clemente/quic-go v0.27.0 // indirect
+	github.com/lucas-clemente/quic-go v0.26.0 // indirect
 	github.com/marten-seemann/qtls-go1-16 v0.1.5 // indirect
 	github.com/marten-seemann/qtls-go1-17 v0.1.1 // indirect
 	github.com/marten-seemann/qtls-go1-18 v0.1.1 // indirect
-	github.com/miekg/dns v1.1.48 // indirect
-	github.com/mr-karan/doggo v0.5.0 // indirect
+	github.com/miekg/dns v1.1.50 // indirect
+	github.com/mr-karan/doggo v0.5.3 // indirect
 	github.com/nxadm/tail v1.4.8 // indirect
 	github.com/onsi/ginkgo v1.16.5 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/rakyll/statik v0.1.7 // indirect
 	github.com/russross/blackfriday/v2 v2.0.1 // indirect
 	github.com/shurcooL/sanitized_anchor_name v1.0.0 // indirect
-	github.com/sirupsen/logrus v1.7.0 // indirect
+	github.com/sirupsen/logrus v1.8.1 // indirect
 	github.com/tidwall/pretty v1.2.0 // indirect
-	golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 // indirect
-	golang.org/x/mod v0.6.0-dev.0.20220412012744-41445a152478 // indirect
-	golang.org/x/net v0.0.0-20220418201149-a630d4f3e7a2 // indirect
-	golang.org/x/sys v0.0.0-20220412211240-33da011f77ad // indirect
+	golang.org/x/crypto v0.0.0-20220321153916-2c7772ba3064 // indirect
+	golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3 // indirect
+	golang.org/x/net v0.0.0-20220607020251-c690dde0001d // indirect
+	golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a // indirect
 	golang.org/x/tools v0.1.10 // indirect
-	golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f // indirect
+	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
 	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
-	gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c // indirect
 )