Skip to content
This repository has been archived by the owner on Jun 13, 2021. It is now read-only.

Bump vendored docker/cli #657

Merged
merged 1 commit into from Oct 2, 2019
Merged

Conversation

chris-crone
Copy link
Member

- What I did
This allows us to rely on the upstream yaml.v2 library as it includes a mitigation for malicious YAML files.

Related issue: kubernetes/kubernetes#83253

- How I did it

  • Bump docker/cli in Gopkg.toml
  • Run make vendor

- How to verify it

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

@chris-crone chris-crone force-pushed the bump-cli-d83cd904 branch 2 times, most recently from 6364b61 to 135c386 Compare October 1, 2019 14:06
This allows us to rely on the upstream yaml.v2 library as it includes a
mitigation for malicious YAML files (see:
kubernetes/kubernetes#83253).

Signed-off-by: Christopher Crone <christopher.crone@docker.com>
@codecov
Copy link

codecov bot commented Oct 1, 2019

Codecov Report

Merging #657 into master will increase coverage by 0.22%.
The diff coverage is 86.11%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #657      +/-   ##
==========================================
+ Coverage   71.67%   71.89%   +0.22%     
==========================================
  Files          51       52       +1     
  Lines        2616     2651      +35     
==========================================
+ Hits         1875     1906      +31     
- Misses        498      500       +2     
- Partials      243      245       +2
Impacted Files Coverage Δ
internal/commands/root.go 72.11% <0%> (ø) ⬆️
internal/commands/image/command.go 100% <100%> (ø) ⬆️
internal/commands/image/tag.go 88.23% <88.23%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 350ab29...90470cf. Read the comment docs.

@glours glours merged commit 0665684 into docker:master Oct 2, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants