kargo/1.1.1-r0: cve remediation (wolfi-dev#36721)

kargo/1.1.1-r0: fix GHSA-v778-237x-gjrc Advisory data: https://github.com/wolfi-dev/advisories/blob/main/kargo.advisories.yaml Co-authored-by: octo-sts[bot] <[email protected]> Co-authored-by: hbh7 <[email protected]>
utieyin · Dec 17, 2024 · c00af1e · c00af1e
1 parent facea29
commit c00af1e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/kargo.yaml b/kargo.yaml
@@ -1,7 +1,7 @@
 package:
   name: kargo
   version: 1.1.1
-  epoch: 0
+  epoch: 1
   description: Application lifecycle orchestration
   copyright:
     - license: Apache-2.0
@@ -31,6 +31,10 @@ pipeline:
       pnpm install
       NODE_ENV='production' pnpm run build
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+
   - uses: go/build
     with:
       packages: ./cmd/controlplane