Patch CVEs by upgrading golang.org/x/net and github.com/emicklei/go-restful - Githubissues

kubecost / kubectl-cost

CLI for determining the cost of Kubernetes workloads

Apache License 2.0

872 stars 55 forks source link

Patch CVEs by upgrading golang.org/x/net and github.com/emicklei/go-restful #168

Closed michaelmdresser closed 5 months ago

michaelmdresser commented 5 months ago

What does this PR change?

See https://github.com/kubecost/kubectl-cost/issues/167
Did a go get to the requested versions and then a go mod tidy

How does this PR impact users? (This is the kind of thing that goes in release notes!)

Patched https://github.com/advisories/GHSA-vvpx-j8f3-3w6h, https://github.com/advisories/GHSA-4374-p667-p6c8, and https://github.com/advisories/GHSA-r48q-9g5r-8q2h

Links to Issues or ZD tickets this PR addresses or fixes

Closes https://github.com/kubecost/kubectl-cost/issues/167

How was this PR tested?

Ran ./test/integration.sh and it passes