Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade golang.org/x/net from v0.31.0 to v0.33.0 #647

Merged
merged 1 commit into from
Dec 20, 2024

Conversation

MrAlias
Copy link
Contributor

@MrAlias MrAlias commented Dec 20, 2024

This addresses CVE-2024-45338. It looks like dependabot is struggling to make this update, so it is being done manually.

This addresses CVE-2024-45338. It looks like dependabot is struggling to
make this update, so it is being done manually.
@MrAlias MrAlias added dependencies Pull requests that update a dependency file Skip Changelog PRs that do not require a CHANGELOG.md entry labels Dec 20, 2024
@MrAlias MrAlias requested review from a team as code owners December 20, 2024 16:30
@MrAlias MrAlias requested a review from jpkrohling December 20, 2024 16:30
@MrAlias MrAlias merged commit a9cea4f into open-telemetry:main Dec 20, 2024
10 of 12 checks passed
@MrAlias MrAlias deleted the up-golang.org/x/net branch December 20, 2024 16:37
Copy link

codecov bot commented Dec 20, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 48.86%. Comparing base (c70d42c) to head (31d2828).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #647   +/-   ##
=======================================
  Coverage   48.86%   48.86%           
=======================================
  Files          57       57           
  Lines        3381     3381           
=======================================
  Hits         1652     1652           
  Misses       1568     1568           
  Partials      161      161           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file Skip Changelog PRs that do not require a CHANGELOG.md entry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants