Outdated and vulnerable golang x/net version

[jperezdealgaba]

Hello!

We are using ansible-operator-plugins for some internal developments and after performing SAST on the project we noticed that that the used x/net version is vulnerable to several attacks:

✗ High severity vulnerability found in golang.org/x/net/http2
Description: Allocation of Resources Without Limits or Throttling
Info: LINK
Introduced through: golang.org/x/net/http2@v0.20.0
From: golang.org/x/net/http2@v0.20.0
Fixed in: 0.23.0
CVE: LINK

Would it be possible that the x/net version is updated to the most recent version? Thank you!

[chiragkyal]

@jperezdealgaba @acornett21 I think we are now using golang.org/x/net v0.24.0 . Are we good to close this issue?

ansible-operator-plugins/go.mod

Line 88 in 42b5d80

golang.org/x/net v0.24.0 // indirect

[jperezdealgaba]

/lgtm

[acornett21]

• Relates: Update k8s dependencies #67