Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: update yaml package to resolve vulnerabilities #353

Merged
merged 2 commits into from
Jun 24, 2022

Conversation

paulwus
Copy link
Contributor

@paulwus paulwus commented Jun 22, 2022

update yaml package to v3.0.1 to resolve vulnerabilities

@paulwus paulwus requested a review from a team as a code owner June 22, 2022 16:58
@rikez rikez self-requested a review June 22, 2022 17:14
Copy link
Contributor

@rikez rikez left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you update the go.sum?

@paulwus
Copy link
Contributor Author

paulwus commented Jun 23, 2022

@rikez thanks! updated go.sum as requested.

@rikez
Copy link
Contributor

rikez commented Jun 23, 2022

@paulwus Can you link me to the security issue/commit?

@rikez
Copy link
Contributor

rikez commented Jun 24, 2022

@paulwus I think I found the issue related to this version: go-yaml/yaml#665. Going to approve and merge your changes. Thank you for contributing!

@rikez rikez merged commit 0fda232 into segmentio:master Jun 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants