Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go module versions to patch CVEs. #7151

Merged
merged 1 commit into from
May 29, 2023
Merged

Conversation

dlorenc
Copy link
Contributor

@dlorenc dlorenc commented May 28, 2023

These flag in scanners:
golang.org/x/net v0.0.0-20211209124913-491a49abca63 0.0.0-20220906165146-f3363e06e74c go-module GHSA-69cg-p879-7622 High
golang.org/x/net v0.0.0-20211209124913-491a49abca63 0.7.0 go-module GHSA-vvpx-j8f3-3w6h High
golang.org/x/sys v0.0.0-20211029165221-6e7872819dc8 0.0.0-20220412211240-33da011f77ad go-module GHSA-p782-xgp4-8hr8 Medium
golang.org/x/text v0.3.7 0.3.8 go-module GHSA-69ch-w2m2-3vjp High

These flag in scanners:
golang.org/x/net   v0.0.0-20211209124913-491a49abca63  0.0.0-20220906165146-f3363e06e74c  go-module  GHSA-69cg-p879-7622  High
golang.org/x/net   v0.0.0-20211209124913-491a49abca63  0.7.0                              go-module  GHSA-vvpx-j8f3-3w6h  High
golang.org/x/sys   v0.0.0-20211029165221-6e7872819dc8  0.0.0-20220412211240-33da011f77ad  go-module  GHSA-p782-xgp4-8hr8  Medium
golang.org/x/text  v0.3.7                              0.3.8                              go-module  GHSA-69ch-w2m2-3vjp  High

Signed-off-by: Dan Lorenc <dlorenc@chainguard.dev>
@discordianfish
Copy link
Member

/approve

@google-oss-prow
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: discordianfish

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@discordianfish
Copy link
Member

/lgtm

@google-oss-prow google-oss-prow bot added the lgtm label May 29, 2023
@google-oss-prow google-oss-prow bot merged commit 72f3063 into kubeflow:master May 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants