[YUNIKORN-2389] Update golang dependencies

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Component/s: release
• Labels: pull-request-available
• Target Version: 1.5.0
• Assignee: Yu-Lin Chen
• Reporter: Wilfred Spiegelenburg
• Created: 05/Feb/24 03:19
• Updated: 20/Mar/24 14:32
• Resolved: 07/Feb/24 13:30

Description

golang.org/x/crypto v0.16.0 is used but it has CVE-2023-48795 (or GO-2023-2402) and we should upgrade to the latest before the release.

While we are upgrading that one we should also update the others:

• golang.org/x/net v0.20.0
• golang.org/x/sys v0.16.0
• golang.org/x/text v0.14.0
• golang.org/x/tools v0.17.0

Issue Links

• is related to: YUNIKORN-2388 Update gotest.tools/v3
• links to: GitHub Pull Request #120
• links to: GitHub Pull Request #166
• links to: GitHub Pull Request #167
• links to: GitHub Pull Request #777
• links to: GitHub Pull Request #785