Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump golang-jwt version to address CVE. #3618

Merged
merged 2 commits into from
Dec 23, 2024

Conversation

mitchell-as
Copy link
Contributor

@mitchell-as mitchell-as commented Dec 23, 2024

TaskDX-3181 Bump github.com/golang-jwt/jwt/v4 from 4.3.0 to 4.5.1

This just needs a rubber stamp.

All I did was run go get golang.org/golang-jwt/jwt/[email protected] followed by go mod vendor. There were no manual changes; all changes are due to tooling.

@mitchell-as
Copy link
Contributor Author

The scan failure will be addressed by #3619.

@mitchell-as mitchell-as requested a review from SkyLeite December 23, 2024 17:52
@mitchell-as mitchell-as marked this pull request as ready for review December 23, 2024 17:52
@mitchell-as mitchell-as removed the request for review from SkyLeite December 23, 2024 18:15
@mitchell-as mitchell-as merged commit 41e44c1 into version/0-48-0-RC1 Dec 23, 2024
8 checks passed
@mitchell-as mitchell-as deleted the mitchell/dx-3181 branch December 23, 2024 18:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant