Skip to content

Cut a new release with quic-go 0.48.2 #744

@jimmykarily

Description

@jimmykarily

Security scanners have started complaining about quic-go (https://osv.dev/vulnerability/GO-2024-3302) and it needs to be bumped to v0.48.2. This is already bumped in this repository but there is no tag/release for this yet.

I want to open PRs on dependant projects to fix this but it's better if there is a release to bump to (bumping to arbitrary commits from master might not get those PRs accepted)

e.g. this project needs the bump

Background: our Kairos pipelines are failing security scans: https://github.com/kairos-io/kairos/actions/runs/12194383948/job/34018136463?pr=3055

Metadata

Metadata

Assignees

No one assigned

    Labels

    need/triageNeeds initial labeling and prioritization

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions