Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update gopkg.in/yaml.v3 to v3.0.0 #2876

Merged
merged 1 commit into from
May 30, 2022

Conversation

SaschaSchwarze0
Copy link
Contributor

Based on go tool nm, the buildkitd and buildctl binary are not affected by CVE-2022-28948, but not every security scanning tool is smart enough to detect that.

@tonistiigi
Copy link
Member

Check the CI results

@SaschaSchwarze0 SaschaSchwarze0 force-pushed the sascha-update-yaml-v3 branch from 4ea58f1 to 22c8206 Compare May 25, 2022 07:26
@SaschaSchwarze0
Copy link
Contributor Author

Check the CI results

Interesting, wondering how I managed to get it updated in vendor, but the modules.txt not updated. Ran go mod vendor again and modules.txt became dirty.

Signed-off-by: Sascha Schwarze <schwarzs@de.ibm.com>
@SaschaSchwarze0 SaschaSchwarze0 force-pushed the sascha-update-yaml-v3 branch from 22c8206 to df16694 Compare May 30, 2022 08:18
@crazy-max crazy-max merged commit d360225 into moby:master May 30, 2022
@SaschaSchwarze0 SaschaSchwarze0 deleted the sascha-update-yaml-v3 branch May 31, 2022 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants