Skip to content

Conversation

@mfridman
Copy link
Contributor

This PR does not attempt to update all dependencies, only containerd/continuity.

go get -u github.com/containerd/continuity@latest
go mod tidy
go mod verify

Why this one specifically? Because older versions of this package used a jwt package that has a "high severity" CVE (not really "high severity" in my opinion, but whatever).

By bumping this dependency (which hopefully doesn't break anything) will avoid dependants of ory/dockertest having to deal with this issue. An example pressly/goose#330

go mod tidy
go mod verify
@mfridman mfridman changed the title Update containerd/continuity to latest version chore : update containerd/continuity to latest version Apr 14, 2022
@codecov
Copy link

codecov bot commented Apr 14, 2022

Codecov Report

❗ No coverage uploaded for pull request base (v3@cfab898). Click here to learn what that means.
The diff coverage is n/a.

@@          Coverage Diff          @@
##             v3     #352   +/-   ##
=====================================
  Coverage      ?   53.59%           
=====================================
  Files         ?        1           
  Lines         ?      334           
  Branches      ?        0           
=====================================
  Hits          ?      179           
  Misses        ?      118           
  Partials      ?       37           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cfab898...7c51ad0. Read the comment docs.

@mfridman
Copy link
Contributor Author

mfridman commented Apr 14, 2022

@mfridman mfridman changed the title chore : update containerd/continuity to latest version chore: update containerd/continuity to latest version Apr 14, 2022
@aeneasr aeneasr merged commit e38b974 into ory:v3 Apr 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants