Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade goproxy to fix DoS vulnerability #7068

Merged
merged 1 commit into from
Sep 14, 2023
Merged

Conversation

cPu1
Copy link
Collaborator

@cPu1 cPu1 commented Sep 14, 2023

Description

Dependabot could not find a published version for goproxy that fixes the DoS vulnerability in the currently used version. This changelist upgrades goproxy to a compatible version that fixes the issue.

Checklist

  • Added tests that cover your change (if possible)
  • Added/modified documentation as required (such as the README.md, or the userdocs directory)
  • Manually tested
  • Made sure the title of the PR is a good description that can go into the release notes
  • (Core team) Added labels for change area (e.g. area/nodegroup) and kind (e.g. kind/improvement)

BONUS POINTS checklist: complete for good vibes and maybe prizes?! 馃く

  • Backfilled missing tests for code in same general area 馃帀
  • Refactored something and made the world a better place 馃専

@cPu1 cPu1 added technical debt dependencies Pull requests that update a dependency file area/tech-debt Leftover improvements in code, testing and building and removed technical debt labels Sep 14, 2023
@cPu1 cPu1 enabled auto-merge September 14, 2023 10:07
@cPu1 cPu1 merged commit f5f55e6 into eksctl-io:main Sep 14, 2023
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/tech-debt Leftover improvements in code, testing and building dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants