Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update module golang.org/x/net to v0.33.0 [SECURITY] #3364

Merged
merged 1 commit into from
Dec 19, 2024

Conversation

pulumi-renovate[bot]
Copy link
Contributor

@pulumi-renovate pulumi-renovate bot commented Dec 12, 2024

This PR contains the following updates:

Package Type Update Change
golang.org/x/net require minor v0.32.0 -> v0.33.0

GitHub Vulnerability Alerts

CVE-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - "every weekday" (UTC).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@pulumi-renovate pulumi-renovate bot added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Dec 12, 2024
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Copy link

codecov bot commented Dec 12, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 41.14%. Comparing base (e5d0c61) to head (ba36cfe).
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #3364   +/-   ##
=======================================
  Coverage   41.14%   41.14%           
=======================================
  Files          85       85           
  Lines       12764    12764           
=======================================
  Hits         5252     5252           
  Misses       7122     7122           
  Partials      390      390           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@pulumi-renovate pulumi-renovate bot changed the title Update module golang.org/x/crypto to v0.31.0 [SECURITY] Update module golang.org/x/crypto to v0.31.0 [SECURITY] - autoclosed Dec 12, 2024
@pulumi-renovate pulumi-renovate bot closed this Dec 12, 2024
@pulumi-renovate pulumi-renovate bot deleted the renovate/security branch December 12, 2024 02:44
@pulumi-renovate pulumi-renovate bot changed the title Update module golang.org/x/crypto to v0.31.0 [SECURITY] - autoclosed Update module golang.org/x/crypto to v0.31.0 [SECURITY] Dec 19, 2024
@pulumi-renovate pulumi-renovate bot reopened this Dec 19, 2024
@pulumi-renovate pulumi-renovate bot changed the title Update module golang.org/x/crypto to v0.31.0 [SECURITY] Update module golang.org/x/net to v0.33.0 [SECURITY] Dec 19, 2024
@pulumi-renovate pulumi-renovate bot enabled auto-merge (squash) December 19, 2024 02:31
@pulumi-renovate pulumi-renovate bot merged commit c17b365 into master Dec 19, 2024
12 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants