Skip to content

Conversation

@ATGardner
Copy link
Contributor

What

  • update github.com/argoproj/argo-workflows/v3 from v3.5.8 to v3.6.2
  • update golang.org/x/text from v0.18.0 to v0.21.0
  • update oras.land/oras-go from v1.2.4 to v1.2.6
  • update golang from 1.23.3 to 1.23.4
  • update alpine from 3.20 to 3.21

Why

fixes CVE-2024-45338, CVE-2024-53862, CVE-2024-9143 and CVE-2024-11053

Notes

@ATGardner ATGardner self-assigned this Dec 24, 2024
@@ -1,29 +1,23 @@
# docker buildx build --platform linux/amd64,linux/arm64 -t quay.io/codefresh/golang-ci-helper:1.21.12 -f Dockerfile.helper .
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is just the dockerfile for our golang-ci-helper image. not being built automatically anywhere.

@dmaizel dmaizel merged commit 1f719a0 into main Dec 24, 2024
1 of 2 checks passed
@dmaizel dmaizel deleted the CR-26724-fix-sec-vulns branch December 24, 2024 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants