Skip to content
This repository was archived by the owner on Apr 18, 2026. It is now read-only.

Pin activesupport version - #517

Merged
jefferbrecht merged 1 commit into
masterfrom
jefferbrecht-update-deps
Dec 2, 2024
Merged

Pin activesupport version#517
jefferbrecht merged 1 commit into
masterfrom
jefferbrecht-update-deps

Conversation

@jefferbrecht

Copy link
Copy Markdown
Member

CVE-2023-28120, CVE-2023-22796, CVE-2023-38037: activesupport is a transitive dependency of google-api-client, which has not been updated upstream to a patched version, so we are pinning it here instead.

@jefferbrecht
jefferbrecht merged commit 38f09cb into master Dec 2, 2024
@jefferbrecht
jefferbrecht deleted the jefferbrecht-update-deps branch December 2, 2024 15:07
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants