Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump golang.org/x/net to v0.25.0 and other deps. #1653

Merged
merged 2 commits into from
May 30, 2024

Conversation

pazmd
Copy link
Contributor

@pazmd pazmd commented May 28, 2024

Bump golang.org/x/net to v0.25.0 and other deps to resolve CVE-2023-45288.

@pazmd pazmd requested a review from stefanprodan as a code owner May 28, 2024 17:14
@pazmd pazmd force-pushed the bump-deps-golang.org/x/net-v0.25.0 branch from 15a5d22 to 469e7dc Compare May 28, 2024 17:15
@pazmd pazmd changed the title Bump golang.org/x/net to v0.25.0. Bump golang.org/x/net to v0.25.0 and other deps. May 28, 2024
pazmd added 2 commits May 29, 2024 09:50
Signed-off-by: pazmd <171067554+pazmd@users.noreply.github.com>
Signed-off-by: pazmd <171067554+pazmd@users.noreply.github.com>
@pazmd pazmd force-pushed the bump-deps-golang.org/x/net-v0.25.0 branch from 121c454 to 61d81ff Compare May 29, 2024 08:51
@pazmd
Copy link
Contributor Author

pazmd commented May 30, 2024

Hi @stefanprodan would it be possible to include this in the next release to resolve the above CVE? Thanks!

Copy link
Member

@aryan9600 aryan9600 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm! thanks @pazmd 🙇

@aryan9600 aryan9600 merged commit 86a4514 into fluxcd:main May 30, 2024
17 checks passed
@pazmd pazmd deleted the bump-deps-golang.org/x/net-v0.25.0 branch May 30, 2024 18:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants