Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to golang crypto 0.31.0 #790

Merged
merged 1 commit into from
Dec 12, 2024
Merged

Update to golang crypto 0.31.0 #790

merged 1 commit into from
Dec 12, 2024

Conversation

masih
Copy link
Member

@masih masih commented Dec 12, 2024

Resolve CVE-2024-45337 by upgrading to the latest golang crypto.

See: https://github.com/filecoin-project/go-f3/security/dependabot/12

@masih masih requested review from Kubuxu and rjan90 December 12, 2024 09:23
@masih masih enabled auto-merge December 12, 2024 09:35
@masih masih added this pull request to the merge queue Dec 12, 2024
Copy link

codecov bot commented Dec 12, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.40%. Comparing base (be650d0) to head (3b82562).
Report is 1 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #790      +/-   ##
==========================================
- Coverage   69.55%   69.40%   -0.16%     
==========================================
  Files          77       77              
  Lines        7896     7896              
==========================================
- Hits         5492     5480      -12     
- Misses       1954     1963       +9     
- Partials      450      453       +3     

see 4 files with indirect coverage changes

Merged via the queue into main with commit b17b794 Dec 12, 2024
13 checks passed
@masih masih deleted the masih/dep-up-go-crypto branch December 12, 2024 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants