Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #333 - 🔒 Bump crypto to 0.17.0 #334

Merged
merged 2 commits into from
Dec 20, 2023

Conversation

ricardozanini
Copy link
Member

@ricardozanini ricardozanini commented Dec 19, 2023

Description of the change:
Fix #333

Motivation for the change:
Fix a sec issue: https://github.com/apache/incubator-kie-kogito-serverless-operator/security/dependabot/47

Checklist

  • Add or Modify a unit test for your change
  • Have you verified that tall the tests are passing?
How to backport a pull request to a different branch?

In order to automatically create a backporting pull request please add one or more labels having the following format backport-<branch-name>, where <branch-name> is the name of the branch where the pull request must be backported to (e.g., backport-7.67.x to backport the original PR to the 7.67.x branch).

NOTE: backporting is an action aiming to move a change (usually a commit) from a branch (usually the main one) to another one, which is generally referring to a still maintained release branch. Keeping it simple: it is about to move a specific change or a set of them from one branch to another.

Once the original pull request is successfully merged, the automated action will create one backporting pull request per each label (with the previous format) that has been added.

If something goes wrong, the author will be notified and at this point a manual backporting is needed.

NOTE: this automated backporting is triggered whenever a pull request on main branch is labeled or closed, but both conditions must be satisfied to get the new PR created.

@ricardozanini ricardozanini merged commit 2120e30 into apache:main Dec 20, 2023
7 checks passed
@ricardozanini ricardozanini deleted the issue-333 branch December 20, 2023 18:53
rgdoliveira pushed a commit to rgdoliveira/kogito-serverless-operator that referenced this pull request Jan 29, 2024
* Fix apache#333 - 🔒 Bump crypto to 0.17.0

Signed-off-by: Ricardo Zanini <[email protected]>

* Rebase with changes on JobsService PR

Signed-off-by: Ricardo Zanini <[email protected]>

---------

Signed-off-by: Ricardo Zanini <[email protected]>
rgdoliveira pushed a commit to rgdoliveira/kogito-serverless-operator that referenced this pull request Jan 29, 2024
* Fix apache#333 - 🔒 Bump crypto to 0.17.0

Signed-off-by: Ricardo Zanini <[email protected]>

* Rebase with changes on JobsService PR

Signed-off-by: Ricardo Zanini <[email protected]>

---------

Signed-off-by: Ricardo Zanini <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Bump golang.org/x/crypto from 0.14.0 to 0.17.0
2 participants