Closed astromechza closed 2 months ago
It's been a while since we've updated the go dependencies here so I did the following:
go mod get -u ./... && go mod tidy
Dependabot isn't flagging any particular vuln, but there dependencies here been quite old.
LGTM Note/question: should we have Dependabot enabled in these repos to automate this process?
LGTM
Note/question: should we have Dependabot enabled in these repos to automate this process?
We can. It's a relatively low risk repo - as it's just a CLI with no networking abilities.
It's been a while since we've updated the go dependencies here so I did the following:
go mod get -u ./... && go mod tidy
Dependabot isn't flagging any particular vuln, but there dependencies here been quite old.