-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
go.mod - bump to github.com/lestrrat-go/jwx/v2 v2.0.21 #38346
Conversation
[git-generate] make notice
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
This pull request does not have a backport label.
To fixup this pull request, you need to add the backport labels for the needed
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They're not doing well are they.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, dupe of #38341
/test |
The update to testify uncovered a bad assertion in Metricbeat code. I have opened #38436 to fix it. Until that is merged, this is blocked. |
db6fb37
to
d291972
Compare
💔 Build Failed
Failed CI StepsHistory
cc @andrewkroh |
💔 Build Failed
Failed CI StepsHistory
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💔 Build Failed
Failed CI StepsHistory
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
💚 Build Succeeded
History
cc @andrewkroh |
Bump to github.com/lestrrat-go/jwx/v2 v2.0.21. Filebeat is unaffected by CVE-2024-28122 which affected prior versions of github.com/lestrrat-go/jwx/v2, it does not use the affected github.com/lestrrat-go/jwx/v2/jwe package nor does process any JWE tokens. (cherry picked from commit d64ce48)
Bump to github.com/lestrrat-go/jwx/v2 v2.0.21. Filebeat is unaffected by CVE-2024-28122 which affected prior versions of github.com/lestrrat-go/jwx/v2, it does not use the affected github.com/lestrrat-go/jwx/v2/jwe package nor does process any JWE tokens. (cherry picked from commit d64ce48) Co-authored-by: Andrew Kroh <[email protected]>
Proposed commit message
Bump to github.com/lestrrat-go/jwx/v2 v2.0.21.
Filebeat is unaffected by CVE-2024-28122 which affected prior versions of github.com/lestrrat-go/jwx/v2, it does not use the affected
github.com/lestrrat-go/jwx/v2/jwe
package nor does process any JWE tokens.