c/ooni-probe-cli
Watch
1
0
Fork
You've already forked ooni-probe-cli
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: pin to gopkg.in/yaml.v3 v3.0.1 (#779)

Browse source 
There is a security warning about using v3.0.0.

We're not using it directly but some dependency of ours is
using it and perhaps pinning would make the warning disappear?

Thanks to @hellais for help investigating this issue.
This commit is contained in:
Simone Basso 2022-06-01 15:29:58 +02:00 • committed by GitHub
commit 153bfe1c57
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
go.mod
View file

@ -115,4 +115,5 @@ require (
golang.org/x/tools v0.1.11-0.20220513221640-090b14e8501f // indirect
google.golang.org/protobuf v1.28.0 // indirect
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)