Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

go get -u github.com/mitchellh/cli #32609

Merged
merged 1 commit into from
Jan 31, 2023
Merged

go get -u github.com/mitchellh/cli #32609

merged 1 commit into from
Jan 31, 2023
+68 −44

Conversation

alisdair
Copy link
Contributor

Fixes #32606. Essentially a backport of #32188. This PR targets the v1.3 branch.

Target Release

1.3.x.

Draft CHANGELOG entry

BUG FIXES

  • Updated to newer github.com/mitchellh/cli version, in turn bringing in updates for several indirect dependencies with known security issues.

@alisdair alisdair added the dependencies Auto-pinning label Jan 31, 2023
@alisdair alisdair requested a review from a team January 31, 2023 17:21
@alisdair alisdair self-assigned this Jan 31, 2023
@crw crw linked an issue Jan 31, 2023 that may be closed by this pull request
Terraform goutils library critical vulnerability CVE-2021-4238 #32606
Closed
@alisdair alisdair merged commit 707ee6d into v1.3 Jan 31, 2023
@alisdair alisdair deleted the upgrade-mitchellh/cli branch January 31, 2023 17:37
@github-actions
Copy link
Contributor

Reminder for the merging maintainer: if this is a user-visible change, please update the changelog on the appropriate release branch.

@github-actions
Copy link
Contributor

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 12, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@apparentlymart apparentlymart apparentlymart approved these changes

Assignees

@alisdair alisdair

Labels
dependencies Auto-pinning
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Terraform goutils library critical vulnerability CVE-2021-4238
2 participants
@alisdair @apparentlymart