Skip to content

Bumped up oras-go for security patches (#1361) - #1362

Open
suidpit wants to merge 1 commit into
notaryproject:mainfrom
suidpit:bump-oras-go
Open

suidpit wants to merge 1 commit into
notaryproject:mainfrom
suidpit:bump-oras-go

Conversation

@suidpit

@suidpit suidpit commented Aug 7, 2026

Copy link
Copy Markdown

These changes update the oras-go dependency to the latest stable version.

Credits:
Found by Team Atlanta.
Collected and verified by OSTIF using AI with their own harness.
Manually verified, fixed, and reported by Shielder.

@github-actions

Copy link
Copy Markdown

This PR is stale because it has been opened for 45 days with no activity. Remove stale label or comment. Otherwise, it will be closed in 30 days.

@github-actions github-actions Bot added the Stale label Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant