bump go-libp2p dependency to a later version compatable with the late…

…st quic-go dependency, which remediates GHSA-px8v-pp82-rcvr. Upstream already made a similar change in main, but its not yet made it into a release. Signed-off-by: Mark McCormick <[email protected]>
wolfi-dev · Dec 11, 2024 · 8e87e02 · 8e87e02
1 parent 278035b
commit 8e87e02
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/spegel.yaml b/spegel.yaml
@@ -22,7 +22,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/quic-go/[email protected]
+      deps: github.com/quic-go/[email protected] github.com/libp2p/[email protected]
 
   - uses: go/build
     with: