[GitHub] [incubator-eventmesh] fengshunli commented on a diff in pull request #3045: [ISSUE #3047] upgrade dependencies to reduce the intrusion of high-risk vulnerabilities

["fengshunli (via GitHub)" <gi...@apache.org>]

fengshunli commented on code in PR #3045:
URL: https://github.com/apache/incubator-eventmesh/pull/3045#discussion_r1098333217


##########
eventmesh-catalog-go/go.mod:
##########
@@ -29,10 +29,72 @@ require (
 	gorm.io/gorm v1.23.8
 )
 
+require (
+	github.com/KyleBanks/depth v1.2.1 // indirect
+	github.com/PuerkitoBio/purell v1.1.1 // indirect

Review Comment:
   This is an indirect dependency that pulls in other modules to generate



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@eventmesh.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@eventmesh.apache.org
For additional commands, e-mail: dev-help@eventmesh.apache.org