kuma
kuma copied to clipboard
chore(deps): security update
Scan output:
Before update:
OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE |
---|---|---|---|---|---|
https://osv.dev/GHSA-v53g-5gjp-272r | 6.4 | Go | helm.sh/helm/v3 | 3.11.2 | go.mod |
https://osv.dev/GHSA-r53h-jv2g-vpx6 | 7.5 | Go | helm.sh/helm/v3 | 3.11.2 | go.mod |
------------------------------------- | ------ | ----------- | --------------------------- | ---------- | -------- |
Uncalled vulnerabilities | |||||
------------------------------------- | ------ | ----------- | --------------------------- | ---------- | -------- |
https://osv.dev/GO-2022-0646 | Go | github.com/aws/aws-sdk-go | 1.44.187 | go.mod |
After update:
OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE |
---|---|---|---|---|---|
https://osv.dev/GO-2022-0646 | Go | github.com/aws/aws-sdk-go | 1.44.187 | go.mod |
If a package is showing up in the scan but the script is not trying to update it then it might be because there is no fixed version yet.
Cherry-picking Mike's commit does not seem to work (tests fail).
closing in favor of https://github.com/kumahq/kuma/pull/9523