-
Notifications
You must be signed in to change notification settings - Fork 68
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump opentelemetry dependencies to address CVE-2023-45142
GHSA-rcjv-mgp8-qvmr identifies go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp as the vulnerable dependency. Bumping that to v0.44.0 requires bumping go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc too, along with all their dependencies. It’s not clear that CVE-2023-45142 actually affects Submariner but this will appease the scanners. Signed-off-by: Stephen Kitt <[email protected]>
- Loading branch information
Showing
2 changed files
with
39 additions
and
45 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters