From cef044d859edf255d146ce1a07b7bc735b045a1f Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 31 May 2022 13:01:50 -0400 Subject: Bump gopkg.in/yaml.v3 to v3.0.1 v3.0.1 resolves GHSA-hp87-p4gw-j4gq - CVE-2022-28948. While podman doesn't appear to be vulnerable to the CVE as the concerned code isn't being called, this update should silence a dependabot alert. Signed-off-by: Lokesh Mandvekar --- vendor/modules.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'vendor/modules.txt') diff --git a/vendor/modules.txt b/vendor/modules.txt index e28d91bde..9bd500ee8 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -864,7 +864,8 @@ gopkg.in/tomb.v1 # gopkg.in/yaml.v2 v2.4.0 ## explicit gopkg.in/yaml.v2 -# gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b +# gopkg.in/yaml.v3 v3.0.1 +## explicit gopkg.in/yaml.v3 # sigs.k8s.io/yaml v1.3.0 sigs.k8s.io/yaml -- cgit v1.2.3-54-g00ecf