Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

versionbump: golang.org/x/net v0.17.0 #4083

Merged
merged 1 commit into from
Nov 21, 2023
Merged

Conversation

justinsb
Copy link
Contributor

@justinsb justinsb commented Nov 8, 2023

Contains a CVE, though we're unlikely to be vulnerable.

@justinsb justinsb force-pushed the bump_golang_x_net branch 2 times, most recently from a646deb to add717a Compare November 8, 2023 14:41
@justinsb
Copy link
Contributor Author

justinsb commented Nov 8, 2023

Doing this manually as dependabot seems to be struggling with our many modules.

@droot
Copy link
Contributor

droot commented Nov 17, 2023

Change looks good. The CLI test failure is coming from this extra message in fn render.

Stderr: + "Status: Image is up to date for gcr.io/kpt-fn/set-namespace:v0.1.3"

Don't think the changes in this PR will cause that. That's probably function of the docker runtime I think ? but will have investigate more.

Old version contains a CVE, though we're unlikely to be vulnerable.

Signed-off-by: justinsb <justinsb@google.com>
@droot droot merged commit bebc5d6 into kptdev:main Nov 21, 2023
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants