Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security vulnerabilities in dependencies of latest release #65

Closed
dveeden opened this issue Jan 16, 2023 · 3 comments
Closed

Security vulnerabilities in dependencies of latest release #65

dveeden opened this issue Jan 16, 2023 · 3 comments
Assignees
@rkoster

Comments

@dveeden
Copy link
Contributor

dveeden commented Jan 16, 2023

Looking at https://deps.dev/go/github.com%2Fcloudfoundry%2Fgosigar this shows a few issues with dependencies that seems to be fixed after v1.3.4 was released. It might be good to release a new version with these improvements.
@rkoster rkoster self-assigned this Jan 19, 2023
@rkoster rkoster moved this from Inbox to Pending Merge | Prioritized in Foundational Infrastructure Working Group Jan 19, 2023
@rkoster
Copy link
Contributor

rkoster commented Jan 19, 2023 •
edited
Loading

Thanks for pointing this out, will create a story on our backlog to work on this.

@rkoster
Copy link
Contributor

rkoster commented Jan 19, 2023

Story created: https://www.pivotaltracker.com/story/show/184270420 (private project, but here as a cross reference for people who can access the tracker project).

@rkoster rkoster moved this from Pending Merge | Prioritized to Inbox in Foundational Infrastructure Working Group Feb 1, 2023
@selzoc
Copy link
Member

selzoc commented Feb 1, 2023

We now have a v1.3.5 and v1.3.6! Our pipeline should automatically tag new versions as dependency bumps come in.

@selzoc selzoc closed this as completed Feb 1, 2023
dveeden added a commit to dveeden/tidb that referenced this issue Feb 6, 2023
@dveeden
*: Update github.com/cloudfoundry/gosigar
c145fda 
- https://github.com/cloudfoundry/gosigar/releases/tag/v1.3.6
- cloudfoundry/gosigar#65
@dveeden dveeden mentioned this issue Feb 6, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rkoster rkoster

Labels
None yet
Projects
Foundational Infrastructure Working Group
Archived in project
Milestone
No milestone
Development

No branches or pull requests
3 participants
@rkoster @selzoc @dveeden