Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@kwilczynski
Copy link
Contributor

This is a manual cherry-pick of #7361

/kind dependency-change
/assign kwilczynski

Update the golang.org/x/net package from 0.13.0 to 0.17.0 to fix vulnerabilities CVE-2023-39325 and CVE-2023-4448.

@kwilczynski kwilczynski requested a review from mrunalp as a code owner October 16, 2023 15:49
@openshift-ci openshift-ci bot added release-note Denotes a PR that will be considered when it comes time to generate release notes. kind/dependency-change Categorizes issue or PR as related to changing dependencies dco-signoff: yes Indicates the PR's author has DCO signed all their commits. labels Oct 16, 2023
@codecov
Copy link

codecov bot commented Oct 16, 2023

Codecov Report

Merging #7386 (c961894) into release-1.28 (b36169e) will decrease coverage by 0.01%.
Report is 2 commits behind head on release-1.28.
The diff coverage is n/a.

Additional details and impacted files
@@               Coverage Diff                @@
##           release-1.28    #7386      +/-   ##
================================================
- Coverage         49.28%   49.27%   -0.01%     
================================================
  Files               136      136              
  Lines             15601    15601              
================================================
- Hits               7689     7688       -1     
- Misses             7004     7005       +1     
  Partials            908      908              

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.13.0 to 0.17.0.
- [Commits](golang/net@v0.13.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Oct 17, 2023
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 17, 2023

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kwilczynski, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Oct 17, 2023
@openshift-ci openshift-ci bot merged commit ed48ecf into cri-o:release-1.28 Oct 17, 2023
@kwilczynski kwilczynski deleted the feature/cherry-pick-97391461b-to-release-1.28 branch October 17, 2023 08:32
@kwilczynski kwilczynski changed the title [release-1.28] build(deps): bump golang.org/x/net from 0.13.0 to 0.17.0 [release-1.28] OCPBUGS-21907: build(deps): bump golang.org/x/net from 0.13.0 to 0.17.0 Oct 19, 2023
@openshift-ci-robot
Copy link

@kwilczynski: Jira Issue OCPBUGS-21907: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-21907 has been moved to the MODIFIED state.

Details

In response to this:

This is a manual cherry-pick of #7361

/kind dependency-change
/assign kwilczynski

Update the golang.org/x/net package from 0.13.0 to 0.17.0 to fix vulnerabilities CVE-2023-39325 and CVE-2023-4448.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@kwilczynski
Copy link
Contributor Author

/jira refresh

@openshift-ci-robot
Copy link

@kwilczynski: Jira Issue OCPBUGS-21907 is in an unrecognized state (MODIFIED) and will not be moved to the MODIFIED state.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@kwilczynski
Copy link
Contributor Author

/jira refresh

@openshift-ci-robot
Copy link

@kwilczynski: Jira Issue OCPBUGS-21907 is in an unrecognized state (MODIFIED) and will not be moved to the MODIFIED state.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@kwilczynski
Copy link
Contributor Author

/jira refresh

@openshift-ci-robot
Copy link

@kwilczynski: Jira Issue OCPBUGS-21907: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-21907 has been moved to the MODIFIED state.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has DCO signed all their commits. kind/dependency-change Categorizes issue or PR as related to changing dependencies lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants