Upgrade Helm v3 dependency

[janotav]

There is currently helm.sh/helm/v3 v3.1.0 dependency. This version of Helm is subject to following vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2020-11013

Could you please either:
a) upgrade the dependency to 3.2.x that is not affected
b) confirm that 2to3 is not affected by the vulnerability

Thanks!

[hickeyma]

@janotav Thanks for raising. The plugin is not affected by the vulnerability.

I think though you raise a good point and it should be updated to the latest version of the libs.

[janotav]

@hickeyma thank you for the confirmation

The dependency upgrade actually cascades and it was my impression that https://github.com/maorfr/helm-plugin-utils currently does not support the new APIs.

Shall I close this or do you want to keep it open for the sake of the upgrade?

[hickeyma]

It is ok as it is not affected either by the vulnerabilities.

Lets leave the issue open, as can use it for updating the libs. 👍