From 912dbc00b6403953a665bb6e9118bf3da1c3014f Mon Sep 17 00:00:00 2001 From: Owen Cabalceta Date: Wed, 24 Aug 2022 14:08:45 -0400 Subject: [PATCH] Update CHANGELOG.md --- CHANGELOG.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 943544d5..9b91dfa3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] ## [v2.0.7] +- Dependency update, note vulnerabilities + - Introduces new vuln https://www.mend.io/vulnerability-database/CVE-2022-29526 - Update dependencies. [603](https://github.com/xmidt-org/webpa-common/pull/603) - [github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available](https://github.com/advisories/GHSA-cg3q-j54f-5p7p) - [github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available](https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p) @@ -17,7 +19,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. - Update Argus & Bascule for jwk migration - Dependency update, note vulnerabilities - Introduces new vuln https://www.mend.io/vulnerability-database/CVE-2022-29526 - + ## [v2.0.6] - Patch for manager writePump panic. [#595](https://github.com/xmidt-org/webpa-common/pull/595)