fix: bump grpc dependency to 1.64.1 (#413)

This should mitigate a vulnerability in the gRPC go dependency, detailed in GHSA-xr7q-jx4m-x55m.
NVIDIA · Nov 4, 2024 · 965b2de · 965b2de
1 parent e9bd7d2
commit 965b2de
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 98 deletions.
diff --git a/go.mod b/go.mod
@@ -24,7 +24,7 @@ require (
 	go.uber.org/automaxprocs v1.5.3
 	go.uber.org/mock v0.4.0
 	golang.org/x/sync v0.7.0
-	google.golang.org/grpc v1.64.0
+	google.golang.org/grpc v1.64.1
 	k8s.io/api v0.30.2
 	k8s.io/apimachinery v0.30.2
 	k8s.io/client-go v0.30.2
@@ -143,7 +143,6 @@ require (
 	go.starlark.net v0.0.0-20231121155337-90ade8b19d09 // indirect
 	golang.org/x/crypto v0.24.0 // indirect
 	golang.org/x/exp v0.0.0-20240103183307-be819d1f06fc // indirect
-	golang.org/x/mod v0.17.0 // indirect
 	golang.org/x/net v0.26.0 // indirect
 	golang.org/x/oauth2 v0.18.0 // indirect
 	golang.org/x/sys v0.21.0 // indirect