A new patch tag in 0.16 series with dependencies update #4873
Description
Output of restic version
0.16.4
What should restic do differently? Which functionality do you think we should add?
We currently detect a bunch of upstream vulnerabilities in the released restic version:
GHSA-m5vv-6r4h-3vj9
GHSA-4v7x-pqxf-cx7m
GHSA-8r3f-844c-mc37
These should be addressed by updating the upstream dependencies, but there was no release tag since 0.16.4 and we don't know if current master is stable and compatible enough to build from it instead.
Would it be possible to tag a new patch version for 0.16 series?
What are you trying to do? What problem would this solve?
We're packaging restic as a part of kanister release and trying to keep it clean from vulnerabilities as much as possible.