Skip to content

chore(deps): Bump echo/v4 dependency.#318

Open
connyay wants to merge 1 commit into
temporalio:mainfrom
connyay:cjh-bump-echo
Open

chore(deps): Bump echo/v4 dependency.#318
connyay wants to merge 1 commit into
temporalio:mainfrom
connyay:cjh-bump-echo

Conversation

@connyay
Copy link
Copy Markdown

@connyay connyay commented Apr 25, 2025

Trying to drop the transitive golang-jwt/jwt@v3.2.2 dep for GHSA-mh63-6h87-95cp

What was changed

Bumped the echo/v4 dpendency

Why?

Trying to drop the transitive golang-jwt/jwt@v3.2.2 dep for GHSA-mh63-6h87-95cp

Checklist

  1. Closes

  2. How was this tested:

  1. Any docs updates needed?

Trying to drop the transitive golang-jwt/jwt@v3.2.2 dep for GHSA-mh63-6h87-95cp
@AndrewYinLi
Copy link
Copy Markdown

@Alex-Tideman Could you take a look? It patches a CVE vulnerability

@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


Connor Hindley seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants