Azure / Azure/azure-dev

Update gRPC security fixes across azd core and extensions

Open
#9,935 0 comments 0 reactions 1 assignee Claimed by @vhvb1989 View on GitHub
area/security dependencies engineering item
Dominant language
Go
Stars
569
Forks
364
Avg merge
2d 19h
Merged PRs (30d)
136

Description

Dependabot reports 15 high-severity alerts for GHSA-2v4p-qf9q-27wj because azd core and 14 first-party extensions use `google.golang.org/grpc` `v1.83.1`.

Update all affected Go modules together to `v1.83.2` so the repository dependency synchronization policy remains satisfied and all related alerts can be resolved in one change.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.