Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #134

Merged
merged 5 commits into from
Feb 21, 2023
Merged

Update dependencies #134

merged 5 commits into from
Feb 21, 2023

Conversation

carolynvs
Copy link
Collaborator

@carolynvs carolynvs commented Feb 21, 2023

  • Update Go to 1.19.6
  • Update Docker to 20.10.23
  • Update golang.org/x/net to v0.7.0 to address CVE-2022-27664
  • Update cnab-go to v0.25.1

Update to a supported version of Go

Signed-off-by: Carolyn Van Slyck <me@carolynvanslyck.com>
Updating to the most recent docker cli release that works with our setup. If we want to update to v23+ then we need to update our dockerfile to install buildx.

This only updates the version of docker used in our tests, not what is in the go.mod

Signed-off-by: Carolyn Van Slyck <me@carolynvanslyck.com>
Update to a version of golang.org/x/net that is not affected by CVE-2022-27664

Signed-off-by: Carolyn Van Slyck <me@carolynvanslyck.com>
Update the linter to work with Go 1.19.6

Signed-off-by: Carolyn Van Slyck <me@carolynvanslyck.com>
Signed-off-by: Carolyn Van Slyck <me@carolynvanslyck.com>
@carolynvs carolynvs marked this pull request as ready for review February 21, 2023 22:34
@carolynvs carolynvs merged commit bfa78b4 into cnabio:main Feb 21, 2023
@carolynvs carolynvs deleted the bump-deps branch February 21, 2023 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant