You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/07/25 06:17:19 UTC

[GitHub] [pulsar-client-go] massakam opened a new pull request, #813: [security] Bump github.com/stretchr/testify to update gopkg.in/yaml.v3

massakam opened a new pull request, #813:
URL: https://github.com/apache/pulsar-client-go/pull/813

   ### Motivation
   
   A vulnerability scan on this repository found a vulnerable version of `gopkg.in/yaml.v3`.
   https://github.com/advisories/GHSA-hp87-p4gw-j4gq
   
   We need to upgrade the version of `github.com/stretchr/testify` because it directly depends on `gopkg.in/yaml.v3`.
   https://github.com/stretchr/testify/pull/1192
   
   ### Modifications
   
   Upgraded `github.com/stretchr/testify` to the latest version, v1.8.0.
   
   ### Verifying this change
   
   - [ ] Make sure that the change passes the CI checks.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar-client-go] nkurihar merged pull request #813: [security] Bump github.com/stretchr/testify to update gopkg.in/yaml.v3

Posted by GitBox <gi...@apache.org>.

nkurihar merged PR #813:
URL: https://github.com/apache/pulsar-client-go/pull/813


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org