Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump golang.org/x/net from v0.32.0 to v0.33.0 #16366

Closed
wants to merge 1 commit into from

Conversation

IgalKreich
Copy link

Summary

To resolve CVE-2024-45338, golang.org/x/net v0.33.0 or higher but is still v0.32.0 on main.

Checklist

  • No AI generated code was used in this PR

@telegraf-tiger
Copy link
Contributor

telegraf-tiger bot commented Jan 3, 2025

Thanks so much for the pull request!
🤝 ✒️ Just a reminder that the CLA has not yet been signed, and we'll need it before merging. Please sign the CLA when you get a chance, then post a comment here saying !signed-cla

@IgalKreich IgalKreich changed the title Patch golang.org/x/net to v0.33 to resolve vulnerabilities chore(deps): Bump golang.org/x/net from v0.32.0 to v0.33.0 Jan 3, 2025
@telegraf-tiger telegraf-tiger bot added the chore label Jan 3, 2025
@srebhan
Copy link
Member

srebhan commented Jan 15, 2025

@IgalKreich thanks for your work! Could you please sign the CLA so we can review this PR and rebase to latest master to fix the CI build?!

@srebhan srebhan self-assigned this Jan 15, 2025
@srebhan srebhan added dependencies Pull requests that update a dependency file waiting for response waiting for response from contributor security raise security concerns or improve the security of Telegraf labels Jan 15, 2025
@srebhan
Copy link
Member

srebhan commented Jan 23, 2025

Seems like master already is at v0.34.0 so closing this PR... Anyway, thanks for your work @IgalKreich!

@srebhan srebhan closed this Jan 23, 2025
@telegraf-tiger telegraf-tiger bot removed the waiting for response waiting for response from contributor label Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore dependencies Pull requests that update a dependency file security raise security concerns or improve the security of Telegraf
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants