Kai
Kai
The current version of github.com/Azure/azure-sdk-for-go/sdk/azidentity (0.13.2) used contains CVE-2024-35255. Is there any way to bump this to version 1.6.0? https://github.com/kserve/modelmesh-runtime-adapter/blob/4aaa21fd6cc5d0460348fd9258a08068708d400e/go.mod#L7
removed separate subpackages because helm chart does not require separate images for each binary
Packages for modelmesh-runtime-adapter The subpackages has a CVE related to github.com/Azure/azure-sdk-for-go/sdk/azidentity, however bumping this across major versions from 0.x to 1.6 causes compatibility issues in package building. Will file advisory...
Fixes: Related: ### Pre-review Checklist #### For new package PRs only - [ ] This PR is marked as fixing a pre-existing package request bug - [ ] Alternatively, the...
Fixes: Related: ### Pre-review Checklist #### For new package PRs only - [ ] This PR is marked as fixing a pre-existing package request bug - [ ] Alternatively, the...