Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Replace vulnerable dependencies with latest versions #745

Merged
merged 1 commit into from Mar 15, 2023
Merged

Replace vulnerable dependencies with latest versions #745

merged 1 commit into from Mar 15, 2023

Conversation

sfc-gh-ext-simba-lb
Copy link
Contributor

@sfc-gh-ext-simba-lb sfc-gh-ext-simba-lb commented Mar 15, 2023 •
edited

Description

Snyk reported vulnerabilities from nested indirect dependencies. Replace these with latest versions.

golang.org/x/net v0.8.0 fixes:
#724
#708
#721
#720
#719

golang.org/x/crypto v0.7.0 fixes:
#723

gopkg.in/yaml.v2 v2.4.0 fixes:
#722

golang.org/x/sys v0.6.0 fixes:
#715

Checklist

  • Code compiles correctly
  • Run make fmt to fix inconsistent formats
  • Run make lint to get lint errors and fix all of them
  • Created tests which fail without the change (if possible)
  • All tests passing
  • Extended the README / documentation, if necessary

@sfc-gh-ext-simba-lb sfc-gh-ext-simba-lb marked this pull request as ready for review March 15, 2023 21:58
@sfc-gh-ext-simba-lb sfc-gh-ext-simba-lb requested a review from a team as a code owner March 15, 2023 21:58
sfc-gh-igarish
sfc-gh-igarish approved these changes Mar 15, 2023
View reviewed changes
Copy link
Collaborator

@sfc-gh-igarish sfc-gh-igarish left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@sfc-gh-ext-simba-lb sfc-gh-ext-simba-lb merged commit bd12fc7 into master Mar 15, 2023
@sfc-gh-ext-simba-lb sfc-gh-ext-simba-lb deleted the replaceVulnerableVersions branch March 15, 2023 22:25
@github-actions github-actions bot locked and limited conversation to collaborators Mar 15, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@sfc-gh-igarish sfc-gh-igarish sfc-gh-igarish approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@sfc-gh-ext-simba-lb @sfc-gh-igarish