New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade profile/p20200901 requirements #23898

Open

chlowell opened this issue Dec 30, 2024 · 0 comments

Assignees

Labels

Mgmt

Milestone

Member

chlowell commented Dec 30, 2024

profile/p20200901 has a couple transitive dependencies on an x/crypto CVE:

github.com/Azure/azure-sdk-for-go/profile/p20200901/go.mod
└─┬ github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0
  ├─┬ github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0
  │ └── golang.org/x/crypto v0.25.0
  └─┬ golang.org/x/net v0.27.0
    └── golang.org/x/crypto v0.25.0

azcore is already upgraded on main, so the simplest fix is to publish that, then upgrade profile/p20200901

The text was updated successfully, but these errors were encountered:

chlowell added the Mgmt label

chlowell added this to the 2025-01 milestone

chlowell self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment