Skip to content

Bump golang.org/x/net to v0.25.0 and other deps.#1653

Merged
aryan9600 merged 2 commits intofluxcd:mainfrom
pazmd:bump-deps-golang.org/x/net-v0.25.0
May 30, 2024
Merged

Bump golang.org/x/net to v0.25.0 and other deps.#1653
aryan9600 merged 2 commits intofluxcd:mainfrom
pazmd:bump-deps-golang.org/x/net-v0.25.0

Conversation

@pazmd
Copy link
Contributor

@pazmd pazmd commented May 28, 2024

Bump golang.org/x/net to v0.25.0 and other deps to resolve CVE-2023-45288.

@pazmd pazmd requested a review from stefanprodan as a code owner May 28, 2024 17:14
@pazmd pazmd force-pushed the bump-deps-golang.org/x/net-v0.25.0 branch from 15a5d22 to 469e7dc Compare May 28, 2024 17:15
@pazmd pazmd changed the title Bump golang.org/x/net to v0.25.0. Bump golang.org/x/net to v0.25.0 and other deps. May 28, 2024
pazmd added 2 commits May 29, 2024 09:50
Signed-off-by: pazmd <171067554+pazmd@users.noreply.github.com>
Signed-off-by: pazmd <171067554+pazmd@users.noreply.github.com>
@pazmd pazmd force-pushed the bump-deps-golang.org/x/net-v0.25.0 branch from 121c454 to 61d81ff Compare May 29, 2024 08:51
@pazmd
Copy link
Contributor Author

pazmd commented May 30, 2024

Hi @stefanprodan would it be possible to include this in the next release to resolve the above CVE? Thanks!

Copy link
Member

@aryan9600 aryan9600 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm! thanks @pazmd 🙇

@aryan9600 aryan9600 merged commit 86a4514 into fluxcd:main May 30, 2024
@pazmd pazmd deleted the bump-deps-golang.org/x/net-v0.25.0 branch May 30, 2024 18:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants