Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Terraform plugin SDK to v2.25.0 and golang.org/x/net to v0.7.0 #1002

Merged
merged 3 commits into from
Feb 24, 2023

Conversation

Didainius
Copy link
Collaborator

@Didainius Didainius commented Feb 20, 2023

This PR bumps golang.org/x/net to v0.7.0 and is supposed to close two outstanding security issues:

Worth noting that these security problems are not that actual for Terraform uses cases in general as it is not a long-running service.

The other two packages sys and text also got bumped after go mod tidy operation because they are requirements of golang.org/x/net.

I have run full acceptance test suite with tags network and nsxt and did not observe any anomalies.

Signed-off-by: Dainius Serplis <[email protected]>
@Didainius Didainius marked this pull request as ready for review February 21, 2023 05:11
@Didainius Didainius requested a review from adezxc February 21, 2023 05:12
@Didainius Didainius marked this pull request as draft February 21, 2023 08:18
@Didainius Didainius changed the title Bump golang.org/x/net to v0.7.0 Bump Terraform plugin SDK to v2.25.0 and golang.org/x/net to v0.7.0 Feb 21, 2023
Signed-off-by: Dainius Serplis <[email protected]>
@Didainius Didainius merged commit eea7e5f into vmware:main Feb 24, 2023
@Didainius Didainius deleted the securitypatch branch February 24, 2023 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants