Skip to content

nancy: update nancy ignore#3018

Merged
zzzckck merged 3 commits intobnb-chain:developfrom
zzzckck:nancy_issue
Apr 10, 2025
Merged

nancy: update nancy ignore#3018
zzzckck merged 3 commits intobnb-chain:developfrom
zzzckck:nancy_issue

Conversation

@zzzckck
Copy link
Copy Markdown
Collaborator

@zzzckck zzzckck commented Apr 10, 2025

Description

  • add nancy ignore: golang/golang.org/x/net@v0.36.0, it is indirectly included by devp2p can bd upgraded in the future with devp2p
  • remove several fixed nancy vulnerabilities: jwt, go-retryablehttp, golang.org/x/net v0.29

Rationale

NA

Example

NA

Changes

NA

zzzckck added 3 commits April 10, 2025 14:15
golang/golang.org/x/net@v0.36.0 is indirectly included by devp2p
can bd upgraded in the future with devp2p
@zzzckck zzzckck merged commit 6ae4607 into bnb-chain:develop Apr 10, 2025
7 checks passed
forcodedancing pushed a commit to forcodedancing/bsc that referenced this pull request Apr 21, 2025
@zzzckck zzzckck deleted the nancy_issue branch May 14, 2025 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants