diff options
| author |  Yong Tang <yong.tang.github@outlook.com>
| 2022-05-26 08:24:11 -0700 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2022-05-26 11:24:11 -0400 |
| commit | bd4675b983b6e3250a415ff5f0e6cce070ce8dfb (patch) | |
| tree | 102d233f2ccb2d068297b68f18b7a2babc5bc3f2 /go.mod | |
| parent | d44ba63c2424f2d2ff277c068c22acad970838b1 (diff) | |
| download | coredns-bd4675b983b6e3250a415ff5f0e6cce070ce8dfb.tar.gz coredns-bd4675b983b6e3250a415ff5f0e6cce070ce8dfb.tar.zst coredns-bd4675b983b6e3250a415ff5f0e6cce070ce8dfb.zip | |
Update gopkg.in/yaml.v3 to v3.0.0 to fix security issues (#5408)
As the dependabot cannot update the go-yaml automatically,
this PR updates gopkg.in/yaml.v3 to v3.0.0 to fix CVE-2022-28948
(See https://github.com/go-yaml/yaml/issues/666)
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
Diffstat (limited to 'go.mod')
| -rw-r--r-- | go.mod | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -110,7 +110,7 @@ require ( google.golang.org/genproto v0.0.0-20220519153652-3a47de7e79bd // indirect gopkg.in/inf.v0 v0.9.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect - gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect + gopkg.in/yaml.v3 v3.0.0 // indirect k8s.io/kube-openapi v0.0.0-20220328201542-3ee0da9b0b42 // indirect k8s.io/utils v0.0.0-20220210201930-3a6ce19ff2f9 // indirect sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2 // indirect |