Closed justinvp closed 3 weeks ago
First, upgrade to using Go 1.22.
Second, upgrade dependencies in the three go.mod files in this repo, upgrading to the latest version from pulumi/pulumi. This updates transitive dependencies to non-vulnerable versions, specifically:
go.mod
github.com/go-git/go-git/v5
golang.org/x/crypto
golang.org/x/net
google.golang.org/protobuf
Fixes #273
First, upgrade to using Go 1.22.
Second, upgrade dependencies in the three
go.modfiles in this repo, upgrading to the latest version from pulumi/pulumi. This updates transitive dependencies to non-vulnerable versions, specifically:github.com/go-git/go-git/v5: v5.4.2 => v5.12.0golang.org/x/crypto: v0.14.0 => v0.24.0golang.org/x/net: v0.17.0 => v0.26.0google.golang.org/protobuf: v1.30.0 => v1.33.0Fixes #273