Skip to content

Upgrade gopkg.in/yaml.v3 to 3.0.1 #210

Closed
@kichik

Description

@kichik

Can you please update to 3.0.1 to resolve CVE-2022-28948? I'm getting Dependabot alerts because I have a dependency on this library which depends on an old version of gopkg.in/yaml.v3.

$ go mod why gopkg.in/yaml.v3
# gopkg.in/yaml.v3
cloud-z/cmd
github.com/jedib0t/go-pretty/v6/text
github.com/jedib0t/go-pretty/v6/text.test
github.com/stretchr/testify/assert
gopkg.in/yaml.v3
$ grep gopkg.in/yaml.v3 go.sum
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions