2
0

Upgrade golang.org/x/crypto to v0.17.0

pgx is unaffected by CVE-2023-48795 because it does not use SSH.
However, dependabot and other vulnerability scanners may complain so
bump the dependency anyway.
This commit is contained in:
Jack Christensen
2023-12-29 18:14:09 -06:00
parent 4367ee0598
commit 6f2ce92356
2 changed files with 6 additions and 8 deletions
+2 -2
View File
@@ -7,8 +7,8 @@ require (
github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
github.com/jackc/puddle/v2 v2.2.1
github.com/stretchr/testify v1.8.1
golang.org/x/crypto v0.9.0
golang.org/x/text v0.9.0
golang.org/x/crypto v0.17.0
golang.org/x/text v0.14.0
)
require (