search

kubernetes / cloud-provider-alibaba-cloud

CloudProvider for Alibaba Cloud
Apache License 2.0
360 stars 163 forks source link

update golang.org/x/net dependency to 0.4.0 #337

Closed elmiko closed 1 year ago

elmiko commented 1 year ago

What type of PR is this?

/kind bug

What this PR does / why we need it:

this change is being proposed to mitigate CVE 2022-41717, for more information please see https://pkg.go.dev/vuln/GO-2022-1144

Does this PR introduce a user-facing change?

NONE
gujingit commented 1 year ago

/lgtm

gujingit commented 1 year ago

/approve

gujingit commented 1 year ago

/retest

elmiko commented 1 year ago

/retest-required

elmiko commented 1 year ago

@gujingit it looks like that test is timing out during compilation, maybe it needs a longer timeout?

gujingit commented 1 year ago

/retest-required

gujingit commented 1 year ago

/approve

k8s-ci-robot commented 1 year ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: elmiko, gujingit

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes/cloud-provider-alibaba-cloud/blob/master/OWNERS)~~ [gujingit] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment