From 2afa7eb5abee6675070c6cd99ab61b15fe8a7002 Mon Sep 17 00:00:00 2001 From: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com> Date: Thu, 1 Jun 2023 23:07:01 +0000 Subject: [PATCH 1/2] consul/1.15.3 package update --- consul.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/consul.yaml b/consul.yaml index 6d89ebdb9a1..8a2a997326c 100644 --- a/consul.yaml +++ b/consul.yaml @@ -1,8 +1,8 @@ package: name: consul - version: 1.15.2 + version: 1.15.3 # When bumping the version check if the CVE/GHSA mitigations below can be removed. - epoch: 3 + epoch: 0 description: Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure. copyright: - license: MPL-2.0 @@ -19,7 +19,7 @@ pipeline: with: repository: https://github.com/hashicorp/consul tag: v${{package.version}} - expected-commit: 5e08e229dbdaed5adf3ca99afe9df247c51507da + expected-commit: 7ce982ce1846ca14e567a91fa7f088084e736155 destination: ${{package.name}} - working-directory: ${{package.name}} From 431507875c22eca3f4c68c93f1b34b92ad2cf01d Mon Sep 17 00:00:00 2001 From: dlorenc Date: Fri, 2 Jun 2023 04:37:54 -0700 Subject: [PATCH 2/2] Update consul.yaml Remove the x/net bump. The rest look relevant still. Signed-off-by: dlorenc --- consul.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/consul.yaml b/consul.yaml index 8a2a997326c..288a6148f80 100644 --- a/consul.yaml +++ b/consul.yaml @@ -25,9 +25,6 @@ pipeline: - working-directory: ${{package.name}} pipeline: - runs: | - # Mitigate GHSA-vvpx-j8f3-3w6h - go get golang.org/x/net@v0.7.0 - # Mitigate GHSA-8cfg-vx93-jvxw go get k8s.io/client-go@v0.20.1