deps: bump golang.org/x/net to v0.23.0 #3388
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes go vulnerability: https://pkg.go.dev/vuln/GO-2024-2687
security scan https://github.com/keptn/lifecycle-toolkit/actions/runs/8555467155/job/23442929687
The security scan fails, reason:
net/http
is part of go standard lib -> it's used by opentelemetry.io, which uses go version 1.20 (does not contain the fix yet)