Upgrade golang.org/x/crypto to v0.17.0
pgx is unaffected by CVE-2023-48795 because it does not use SSH. However, dependabot and other vulnerability scanners may complain so bump the dependency anyway.
This commit is contained in:
@@ -7,8 +7,8 @@ require (
|
||||
github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
|
||||
github.com/jackc/puddle/v2 v2.2.1
|
||||
github.com/stretchr/testify v1.8.1
|
||||
golang.org/x/crypto v0.9.0
|
||||
golang.org/x/text v0.9.0
|
||||
golang.org/x/crypto v0.17.0
|
||||
golang.org/x/text v0.14.0
|
||||
)
|
||||
|
||||
require (
|
||||
|
||||
Reference in New Issue
Block a user