Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump golang.org/x/net from v0.32.0 to v0.33.0 #16366

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

IgalKreich
Copy link

Summary

To resolve CVE-2024-45338, golang.org/x/net v0.33.0 or higher but is still v0.32.0 on main.

Checklist

  • No AI generated code was used in this PR

@telegraf-tiger
Copy link
Contributor

telegraf-tiger bot commented Jan 3, 2025

Thanks so much for the pull request!
🤝 ✒️ Just a reminder that the CLA has not yet been signed, and we'll need it before merging. Please sign the CLA when you get a chance, then post a comment here saying !signed-cla

@IgalKreich IgalKreich changed the title Patch golang.org/x/net to v0.33 to resolve vulnerabilities chore(deps): Bump golang.org/x/net from v0.32.0 to v0.33.0 Jan 3, 2025
@telegraf-tiger telegraf-tiger bot added the chore label Jan 3, 2025
@srebhan
Copy link
Member

srebhan commented Jan 15, 2025

@IgalKreich thanks for your work! Could you please sign the CLA so we can review this PR and rebase to latest master to fix the CI build?!

@srebhan srebhan self-assigned this Jan 15, 2025
@srebhan srebhan added dependencies Pull requests that update a dependency file waiting for response waiting for response from contributor security raise security concerns or improve the security of Telegraf labels Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore dependencies Pull requests that update a dependency file security raise security concerns or improve the security of Telegraf waiting for response waiting for response from contributor
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants