Skip to content

Conversation

brandtkeller
Copy link
Member

Description

Resolves vulnerability GHSA-wjrx-6529-hcj3. the use of this dependency originates from Syft and we need to wait for them to release.

Given the timeline to release - doing this now is advantageous.

Related Issue

No issue

Checklist before merging

Signed-off-by: Brandt Keller <brandt.keller@defenseunicorns.com>
@brandtkeller brandtkeller self-assigned this Aug 19, 2025
@brandtkeller brandtkeller requested review from a team as code owners August 19, 2025 18:29
Copy link

netlify bot commented Aug 19, 2025

Deploy Preview for zarf-docs canceled.

Name Link
🔨 Latest commit 9d08e0f
🔍 Latest deploy log https://app.netlify.com/projects/zarf-docs/deploys/68a4c297bbc263000874482d

Copy link

codecov bot commented Aug 19, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@brandtkeller brandtkeller added this pull request to the merge queue Aug 19, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Aug 19, 2025
@brandtkeller brandtkeller added this pull request to the merge queue Aug 19, 2025
Merged via the queue into main with commit 4ca2fac Aug 19, 2025
27 checks passed
@brandtkeller brandtkeller deleted the hotfix_go-getter_vuln branch August 19, 2025 21:03
Ansible-man pushed a commit to Ansible-man/zarf that referenced this pull request Sep 6, 2025
…v#4102)

Signed-off-by: Brandt Keller <brandt.keller@defenseunicorns.com>
Signed-off-by: Cade Thomas <cadethomas23@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants