Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

depandabot fix #98

Merged
merged 2 commits into from
Jan 2, 2025
Merged

depandabot fix #98

merged 2 commits into from
Jan 2, 2025

Conversation

gilltaran
Copy link
Contributor

@gilltaran gilltaran commented Dec 30, 2024

Description

golang.org/x/net pkg update for Non-linear parsing of case-insensitive content in golang.org/x/net/html

GitHub Issues

List the GitHub issues impacted by this PR:

GitHub Issue #
dell/csm#1559

Checklist:

  • I have performed a self-review of my own code to ensure there are no formatting, vetting, linting, or security issues
  • I have verified that new and existing unit tests pass locally with my changes
  • I have not allowed coverage numbers to degenerate
  • I have maintained at least 90% code coverage
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • Backward compatibility is not broken

How Has This Been Tested?

Verified in Trivy scan this vulnerability is not coming after the fix

@suryagupta4
Copy link
Contributor

@gilltaran: pkg update also needs to be done in test/integration-test/go.mod for https://github.com/dell/csi-volumegroup-snapshotter/security/dependabot/40

@gilltaran
Copy link
Contributor Author

@gilltaran: pkg update also needs to be done in test/integration-test/go.mod for Non-linear parsing of case-insensitive content in golang.org/x/net/html

Done @suryagupta4

@AkshaySainiDell AkshaySainiDell merged commit 9826acb into main Jan 2, 2025
6 checks passed
@AkshaySainiDell AkshaySainiDell deleted the depandabot-issue branch January 2, 2025 04:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants