Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TT-13158] Upgrading libraries to fix CVEs #855

Merged
merged 2 commits into from
Oct 3, 2024
Merged

[TT-13158] Upgrading libraries to fix CVEs #855

merged 2 commits into from
Oct 3, 2024

Conversation

mativm02
Copy link
Contributor

@mativm02 mativm02 commented Oct 3, 2024 •
edited
Loading

Description

Upgrading pgx and protobuf to fix two critical CVEs

Related Issue

https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/42?selectedIssue=TT-13158
https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/42?selectedIssue=TT-13159

Motivation and Context

How This Has Been Tested

Screenshots (if appropriate)

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • Make sure you are requesting to pull a topic/feature/bugfix branch (right side). If pulling from your own
    fork, don't request your master!
  • Make sure you are making a pull request against the master branch (left side). Also, you should start
    your branch off our latest master.
  • My change requires a change to the documentation.
    • If you've changed APIs, describe what needs to be updated in the documentation.
  • I have updated the documentation accordingly.
  • Modules and vendor dependencies have been updated; run go mod tidy && go mod vendor
  • I have added tests to cover my changes.
  • All new and existing tests passed.
  • Check your code additions will not fail linting checks:
    • go fmt -s
    • go vet

@mativm02 mativm02 changed the title [Upgrading libraries to fix CVEs [TT-13158] Upgrading libraries to fix CVEs Oct 3, 2024
@mativm02 mativm02 merged commit c2e59fe into master Oct 3, 2024
32 checks passed
@mativm02 mativm02 deleted the TT-13158 branch October 3, 2024 15:10
@mativm02
Copy link
Contributor Author

mativm02 commented Oct 8, 2024

/release to release-1.11

@tykbot tykbot
Copy link

tykbot bot commented Oct 8, 2024

Working on it! Note that it can take a few minutes.

tykbot bot pushed a commit that referenced this pull request Oct 8, 2024
@mativm02
Upgrading libraries to fix CVEs (#855)
1683de9 
(cherry picked from commit c2e59fe)
@buger buger mentioned this pull request Oct 8, 2024
Merged
@tykbot tykbot
Copy link

tykbot bot commented Oct 8, 2024

@mativm02 Succesfully merged PR

mativm02 added a commit that referenced this pull request Oct 8, 2024
@buger @mativm02
Merging to release-1.11: Upgrading libraries to fix CVEs (#855) (#856)
bf5d4c1 
* Upgrading libraries to fix CVEs (#855)

(cherry picked from commit c2e59fe)

* Update go.sum

* go mod tidy

---------

Co-authored-by: Matias <matipvp02@gmail.com>
Co-authored-by: Matias <83959431+mativm02@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sredxny sredxny sredxny approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@mativm02 @sredxny