oras-project / oras

OCI registry client - managing content like artifacts, images, packages
https://oras.land
Apache License 2.0
1.52k stars 181 forks source link

bump: golang version to fix CVE-2024-24790 and CVE-2024-34156 #1562

Closed qweeah closed 2 hours ago

qweeah commented 17 hours ago

What this PR does / why we need it: This PR bumps CLI to avoid below CVEs:

Please check the following list:

codecov[bot] commented 17 hours ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 82.82%. Comparing base (dcef719) to head (3f28f00). Report is 1 commits behind head on release-1.2.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## release-1.2 #1562 +/- ## =============================================== - Coverage 85.01% 82.82% -2.20% =============================================== Files 107 107 Lines 3805 4618 +813 =============================================== + Hits 3235 3825 +590 - Misses 341 564 +223 Partials 229 229 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.