You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@yunikorn.apache.org by "Wilfred Spiegelenburg (Jira)" <ji...@apache.org> on 2022/08/18 02:55:00 UTC

[jira] [Commented] (YUNIKORN-1283) upgrade go dependencies

    [ https://issues.apache.org/jira/browse/YUNIKORN-1283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17581112#comment-17581112 ] 

Wilfred Spiegelenburg commented on YUNIKORN-1283:
-------------------------------------------------

another one we might need to update: golang.org/x/tools

> upgrade go dependencies
> -----------------------
>
>                 Key: YUNIKORN-1283
>                 URL: https://issues.apache.org/jira/browse/YUNIKORN-1283
>             Project: Apache YuniKorn
>          Issue Type: Task
>          Components: core - common, release, scheduler-interface, shim - kubernetes
>            Reporter: Wilfred Spiegelenburg
>            Assignee: Wilfred Spiegelenburg
>            Priority: Major
>
> some of the direct or indirect dependencies we have from go have open security issues we should upgrade to versions without the issue:
>  * golang.org/x/crypto
>  * golang.org/x/net
>  * golang.org/x/sys
>  * golang.org/x/text
> We are completely missing the go.sum file in the release repo which causes the make of the perf-tools to fail



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org