Skip to content

Conversation

jefferbrecht
Copy link
Member

CVE-2023-28120, CVE-2023-22796, CVE-2023-38037: activesupport is a transitive dependency of google-api-client, which has not been updated upstream to a patched version, so we are pinning it here instead.

@jefferbrecht jefferbrecht merged commit 38f09cb into master Dec 2, 2024
6 checks passed
@jefferbrecht jefferbrecht deleted the jefferbrecht-update-deps branch December 2, 2024 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants