Skip to content

Backport of [NET-8601] Upgrade vault/api and docker/docker to resolve open CVEs into release/1.1.11#3845

Merged
zalimeni merged 3 commits intorelease/1.1.11from
backport/zalimeni/fix-multiple-cves/1.1.11
Mar 29, 2024
Merged

Backport of [NET-8601] Upgrade vault/api and docker/docker to resolve open CVEs into release/1.1.11#3845
zalimeni merged 3 commits intorelease/1.1.11from
backport/zalimeni/fix-multiple-cves/1.1.11

Conversation

@zalimeni
Copy link
Copy Markdown
Member

Backport

This PR is a manual backport of #3837.

The below text is copied from the body of the original PR.


Changes proposed in this PR

Created by running:

make go-mod-get DEP_VERSION=github.com/hashicorp/vault/api@v1.12.2
make go-mod-get DEP_VERSION=github.com/docker/docker@v25.0.5+incompatible

These unblock the 1.4.1 patch release, so will be backported to .x and point-release branches.

How I've tested this PR

CI and Security Scan pass.

Also ran scan repository . to confirm CVEs are resolved.

How I expect reviewers to test this PR

👀

Checklist


Overview of commits

@zalimeni zalimeni added pr/no-changelog PR does not need a corresponding .changelog entry pr/no-backport signals that a PR will not contain a backport label and removed pr/no-changelog PR does not need a corresponding .changelog entry labels Mar 29, 2024
@zalimeni zalimeni merged commit 76370d6 into release/1.1.11 Mar 29, 2024
@zalimeni zalimeni deleted the backport/zalimeni/fix-multiple-cves/1.1.11 branch March 29, 2024 18:09
kisunji pushed a commit that referenced this pull request Apr 3, 2024
* Prerelease 1.1.11

* [prerelease-1.1.11] Disable CE test (#3825)

* Prerelease/1.1.11 (#3833)

* Backport of [NET-8601] Upgrade `vault/api` and `docker/docker` to resolve open CVEs into release/1.1.11 (#3845)

* backport of commit 1711f31

* backport of commit 9049c0d

* backport of commit cacd09b

---------

Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr/no-backport signals that a PR will not contain a backport label

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants