Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Security issue #54/#57 (backport #125) #126

Merged
merged 3 commits into from
Oct 28, 2024

Conversation

mergify[bot]
Copy link

@mergify mergify bot commented Oct 28, 2024

Problem:
bump packages required for security https://github.com/harvester/security/issues/54 and https://github.com/harvester/security/issues/57

Solution:

Related Issue:

Test plan:


This is an automatic backport of pull request #125 done by [Mergify](https://mergify.com).

bump packages for CVE-2023-45288

Signed-off-by: Chris Chiu <[email protected]>
(cherry picked from commit 61615bb)

# Conflicts:
#	Dockerfile.dapper
#	go.mod
Copy link
Author

mergify bot commented Oct 28, 2024

Cherry-pick of 61615bb has failed:

On branch mergify/bp/v0.5.x/pr-125
Your branch is up to date with 'origin/v0.5.x'.

You are currently cherry-picking commit 61615bb7.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   go.sum
	modified:   vendor/modules.txt

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   Dockerfile.dapper
	both modified:   go.mod

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

@mergify mergify bot added the conflicts label Oct 28, 2024
@mergify mergify bot mentioned this pull request Oct 28, 2024
@mingshuoqiu mingshuoqiu merged commit 66fb809 into v0.5.x Oct 28, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant