Prepare v0.49.2 release

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
open-policy-agent · Feb 24, 2023 · 69af730 · 69af730
1 parent 6e2facf
commit 69af730
Show file tree

Hide file tree

Showing 4 changed files with 4,662 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file. This
 project adheres to [Semantic Versioning](http://semver.org/).
 
+## 0.49.2
+
+This release migrates the [ORAS Go library](oras.land/oras-go/v2) from v1.2.2 to v2.
+The earlier version of the library had a dependency on the [docker](github.com/docker/docker)
+package. That version of the docker package had some reported vulnerabilities such as
+CVE-2022-41716, CVE-2022-41720. The ORAS Go library v2 removes the dependency on the docker package.
+
 ## 0.49.1
 
 This is a bug fix release addressing the following Golang security issues: