Disable HTTP/2 by updating knative/pkg

This disables HTTP/2 for webhook by updating to PR knative/pkg#2875 It fixes CVE-2023-44487.
tektoncd · Nov 2, 2023 · c2b5f68 · c2b5f68
1 parent 7069889
commit c2b5f68
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 4 deletions.
diff --git a/go.mod b/go.mod
@@ -34,7 +34,7 @@ require (
 	k8s.io/code-generator v0.26.5
 	k8s.io/klog v1.0.0
 	k8s.io/kube-openapi v0.0.0-20230515203736-54b630e78af5
-	knative.dev/pkg v0.0.0-20231011193800-bd99f2f98be7
+	knative.dev/pkg v0.0.0-20231023150739-56bfe0dd9626
 	sigs.k8s.io/yaml v1.4.0
 )
 

diff --git a/go.sum b/go.sum
diff --git a/vendor/knative.dev/pkg/webhook/webhook.go b/vendor/knative.dev/pkg/webhook/webhook.go
diff --git a/vendor/modules.txt b/vendor/modules.txt