add v1.13.4 release notes (dapr#7769)

Signed-off-by: yaron2 <schneider.yaron@live.com>
AnnuCode · May 28, 2024 · b18d951 · b18d951
1 parent c2bdebb
commit b18d951
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/docs/release_notes/v1.13.4.md b/docs/release_notes/v1.13.4.md
@@ -0,0 +1,19 @@
+# Dapr 1.13.4
+
+## Update the golang.org/x/net dependency to v0.24.0
+
+### Problem
+
+Dapr used a Golang dependency for golang.org/x/net that contained the following [CVE](https://www.cvedetails.com/cve/CVE-2023-45288/).
+
+### Impact
+
+CVE details [here](https://www.cvedetails.com/cve/CVE-2023-45288/).
+
+### Root cause
+
+CVE details [here](https://www.cvedetails.com/cve/CVE-2023-45288/).
+
+### Solution
+
+The dependency version was updated from v0.21.0 to v0.24.0