build(deps): bump the golang group across 1 directory with 11 updates#229
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the golang group across 1 directory with 11 updates#229dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the golang group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.13.0` | `0.14.1` | | [github.com/buger/jsonparser](https://github.com/buger/jsonparser) | `1.1.1` | `1.2.0` | | [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.6.0` | `22.7.0` | | [github.com/godbus/dbus/v5](https://github.com/godbus/dbus) | `5.1.0` | `5.2.2` | | [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.12` | `1.0.13` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.25.1` | `2.28.3` | | [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) | `1.12.0` | `1.13.1` | | [github.com/safchain/ethtool](https://github.com/safchain/ethtool) | `0.6.2` | `0.7.0` | | [sigs.k8s.io/knftables](https://github.com/kubernetes-sigs/knftables) | `0.0.18` | `0.0.21` | Updates `github.com/Microsoft/hcsshim` from 0.13.0 to 0.14.1 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](microsoft/hcsshim@v0.13.0...v0.14.1) Updates `github.com/buger/jsonparser` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/buger/jsonparser/releases) - [Commits](buger/jsonparser@v1.1.1...v1.2.0) Updates `github.com/coreos/go-systemd/v22` from 22.6.0 to 22.7.0 - [Release notes](https://github.com/coreos/go-systemd/releases) - [Commits](coreos/go-systemd@v22.6.0...v22.7.0) Updates `github.com/godbus/dbus/v5` from 5.1.0 to 5.2.2 - [Release notes](https://github.com/godbus/dbus/releases) - [Commits](godbus/dbus@v5.1.0...v5.2.2) Updates `github.com/mattn/go-shellwords` from 1.0.12 to 1.0.13 - [Commits](mattn/go-shellwords@v1.0.12...v1.0.13) Updates `github.com/onsi/ginkgo/v2` from 2.25.1 to 2.28.3 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.25.1...v2.28.3) Updates `github.com/onsi/gomega` from 1.38.1 to 1.40.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.38.1...v1.40.0) Updates `github.com/opencontainers/selinux` from 1.12.0 to 1.13.1 - [Release notes](https://github.com/opencontainers/selinux/releases) - [Commits](opencontainers/selinux@v1.12.0...v1.13.1) Updates `github.com/safchain/ethtool` from 0.6.2 to 0.7.0 - [Release notes](https://github.com/safchain/ethtool/releases) - [Commits](safchain/ethtool@v0.6.2...v0.7.0) Updates `golang.org/x/sys` from 0.35.0 to 0.43.0 - [Commits](golang/sys@v0.35.0...v0.43.0) Updates `sigs.k8s.io/knftables` from 0.0.18 to 0.0.21 - [Changelog](https://github.com/kubernetes-sigs/knftables/blob/master/CHANGELOG.md) - [Commits](kubernetes-sigs/knftables@v0.0.18...v0.0.21) --- updated-dependencies: - dependency-name: github.com/Microsoft/hcsshim dependency-version: 0.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/buger/jsonparser dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/coreos/go-systemd/v22 dependency-version: 22.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/godbus/dbus/v5 dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/mattn/go-shellwords dependency-version: 1.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.28.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/onsi/gomega dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/opencontainers/selinux dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: github.com/safchain/ethtool dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: golang.org/x/sys dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang - dependency-name: sigs.k8s.io/knftables dependency-version: 0.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
WalkthroughUpdated Go version from 1.24.0 to 1.25.0 in ChangesDependency and Toolchain Update
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes 🚥 Pre-merge checks | ✅ 12✅ Passed checks (12 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
Contributor
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
needs-ok-to-test
Contributor
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@go.mod`:
- Line 55: The go.mod currently pins the indirect dependency
google.golang.org/grpc at v1.72.2 which is affected by GHSA-p77j-4mvh-x3m3;
update the module requirement for google.golang.org/grpc to a fixed release
(preferably v1.81.0 or at minimum v1.79.3) and run `go get`/`go mod tidy` to
refresh the lockfile so the resolved version is upgraded across the build.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: 34387c15-1305-4293-8b5d-84e9ed2352f0
⛔ Files ignored due to path filters (299)
go.sumis excluded by!**/*.sumvendor/github.com/Microsoft/hcsshim/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/hcn/hcnerrors.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/log/hook.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/oc/exporter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/protocol/guestrequest/types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/safefile/safeopen.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/security/grantvmgroupaccess.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/wclayer/importlayer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/winapi/cimfs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/winapi/devices.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/Microsoft/hcsshim/internal/winapi/zsyscall_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/.gitignoreis excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/.travis.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/bytes.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/bytes_safe.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/bytes_unsafe.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/escape.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/fuzz.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/parser.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/buger/jsonparser/proof.yamlis excluded by!**/vendor/**,!vendor/**vendor/github.com/containerd/typeurl/v2/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/containerd/typeurl/v2/types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/containerd/typeurl/v2/types_gogo.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/coreos/go-systemd/v22/activation/files.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/coreos/go-systemd/v22/activation/files_stub.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/coreos/go-systemd/v22/activation/files_unix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/coreos/go-systemd/v22/activation/listeners.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/COPYING.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/LICENSE.BSDis excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/LICENSE.MPL-2.0is excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/internal/consts/consts.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/assert/assert.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/errors_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/at_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/fd.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/fd_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/mount_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/openat2_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_errors_go120.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_errors_unsupported.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_generics_go121.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_generics_unsupported.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/kernelversion/kernel_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/linux/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/linux/mount_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/linux/openat2_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/procfs/procfs_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/procfs/procfs_lookup_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/lookup_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/mkdir_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/open_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/openat2_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs/procfs_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/.cirrus.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/SECURITY.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/auth.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/auth_default_other.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/auth_default_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/auth_sha1_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/call.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/conn.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/conn_darwin.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/conn_other.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/conn_unix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/conn_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/dbus.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/decoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/default_handler.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/encoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/export.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/homedir.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/match.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/message.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/object.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/sequential_handler.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/server_interfaces.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/sig.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/transport_nonce_tcp.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/transport_unix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/transport_unixcred_freebsd.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/transport_unixcred_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/variant.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/variant_lexer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/godbus/dbus/v5/variant_parser.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/pprof/profile/profile.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/pprof/profile/proto.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mattn/go-shellwords/shellwords.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mattn/go-shellwords/util_posix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mattn/go-shellwords/util_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/CHANGELOG.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/core_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/decorator_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/automaxprocs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroup.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroups.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroups2.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cpu_quota_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cpu_quota_unsupported.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/errors.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/mountpoint.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/runtime.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/subsys.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/command/command.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/command/program.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/profiles_and_reports.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/run.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/main.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo/run/run_command.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/ginkgo_t_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/focus.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/group.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/node.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/ordering.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson_event_writer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson_reporter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/suite.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/internal/testingtproxy/testing_t_proxy.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/reporters/default_reporter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/reporters/gojson_report.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/reporters/junit_report.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/reporters/teamcity_report.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/reporting_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/table_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/config.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/errors.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/flags.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/semver_filter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/ginkgo/v2/types/version.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/CHANGELOG.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/format/format.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/gomega_dsl.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/matchers.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/matchers/have_key_matcher.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/matchers/have_key_with_value_matcher.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/matchers/match_error_strictly_matcher.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/onsi/gomega/matchers/support/goraph/edge/edge.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/opencontainers/selinux/go-selinux/selinux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/opencontainers/selinux/go-selinux/selinux_linux.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/opencontainers/selinux/go-selinux/selinux_stub.gois excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/.codecov.ymlis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/.gitignoreis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/CHANGELOG.mdis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/CODE_OF_CONDUCT.mdis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/CONTRIBUTING.mdis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/LICENSEis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/Makefileis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/README.mdis excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/automaxprocs.gois excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/internal/cgroups/doc.gois excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/maxprocs/maxprocs.gois excluded by!**/vendor/**,!vendor/**vendor/go.uber.org/automaxprocs/maxprocs/version.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/LICENSEis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/PATENTSis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/semver/semver.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/escape.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/iter.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/node.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/nodetype_string.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/parse.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/html/render.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sync/errgroup/errgroup.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/affinity_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/fdset.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ifreq_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_signed.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_unsigned.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/mkall.shis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/mkerrors.shis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_netbsd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_solaris.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_unix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_loong64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_mips.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_mips64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_ppc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_s390x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zsyscall_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ztypes_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/aliases.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/dll_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/registry/key.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/registry/zsyscall_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/security_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/syscall_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/types_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/windows/zsyscall_windows.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/japanese/eucjp.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/japanese/iso2022jp.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/japanese/shiftjis.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/korean/euckr.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/simplifiedchinese/gbk.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/simplifiedchinese/hzgb2312.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/traditionalchinese/big5.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/text/encoding/unicode/unicode.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/ast/inspector/cursor.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/ast/inspector/inspector.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/ast/inspector/iter.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/gcexportdata/gcexportdata.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/gcexportdata/importer.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/doc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/external.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/golist.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/golist_overlay.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/loadmode_string.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/packages.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/packages/visit.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/objectpath/objectpath.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/typeutil/callee.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/typeutil/imports.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/typeutil/map.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/typeutil/methodsetcache.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/go/types/typeutil/ui.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/aliases/aliases.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/core/event.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/core/export.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/core/fast.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/doc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/event.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/keys/keys.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/keys/standard.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/keys/util.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/event/label/label.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/bimport.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/exportdata.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/gcimporter.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/iexport.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/iimport.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/predeclared.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/support.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gcimporter/ureader.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gocommand/invoke.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gocommand/invoke_notunix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gocommand/invoke_unix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gocommand/vendor.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/gocommand/version.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/packagesinternal/packages.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/codes.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/decoder.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/doc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/encoder.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/flags.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/reloc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/support.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/sync.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/syncmarker_string.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/pkgbits/version.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/stdlib/deps.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/stdlib/import.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/stdlib/manifest.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/stdlib/stdlib.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/common.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/coretype.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/free.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/normalize.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/termlist.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typeparams/typeterm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/classify_call.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/element.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/errorcode.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/errorcode_string.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/fx.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/isnamed.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/qualifier.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/recv.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/toonew.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/types.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/varkind.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/varkind_go124.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/typesinternal/zerovalue.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/versions/features.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/tools/internal/versions/gover.gois excluded by!**/vendor/**,!vendor/**
📒 Files selected for processing (1)
go.mod
| golang.org/x/text v0.36.0 // indirect | ||
| golang.org/x/tools v0.44.0 // indirect | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a // indirect | ||
| google.golang.org/grpc v1.72.2 // indirect |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Resolved grpc version:"
go list -m -f '{{.Version}}' google.golang.org/grpc
echo
echo "Why grpc is in the build graph:"
go mod why -m google.golang.org/grpcRepository: openshift/containernetworking-plugins
Length of output: 2857
🌐 Web query:
GHSA-p77j-4mvh-x3m3 grpc authz bypass advisory
💡 Result:
GHSA-p77j-4mvh-x3m3 describes an authorization bypass in gRPC-Go caused by improper input validation of the HTTP/2 :path pseudo-header when it is missing the mandatory leading slash. What happens - If a client sends HTTP/2 :path values like "Service/Method" instead of "/Service/Method", gRPC-Go may still route the request to the correct handler. - However, path-based authorization logic (including the official RBAC in google.golang.org/grpc/authz, and/or custom interceptors that rely on info.FullMethod / grpc.Method(ctx)) may evaluate the non-canonical, raw path string. - As a result, "deny" rules that are written for canonical paths (starting with "/") may not match, allowing the request to bypass authorization when the policy has a fallback/allow behavior. Impact / who is affected - Affects gRPC-Go servers that: 1) use path-based authorization interceptors (grpc/authz RBAC or equivalents), and 2) have security policies with deny rules for canonical paths but otherwise allow other requests by default (fallback allow). - Exploitation requires the attacker to be able to send raw HTTP/2 frames with malformed :path directly to the gRPC server. Fixed in - Upgrade to gRPC-Go v1.79.3 or newer (the advisory notes this as the fixed tagged release; also references the latest master branch). Recommended mitigations (if you can’t upgrade immediately) - Use a validating outermost interceptor that rejects malformed method/path before authorization interceptors run (returning codes.Unimplemented per the advisory). - Ensure your infrastructure/proxies enforce strict HTTP/2 compliance and reject/normalize requests where :path does not start with a leading slash. - Harden authorization policy toward a default-deny posture (explicitly allow what’s needed; deny everything else). Related CVE - The issue is also listed as CVE-2026-33186 in NVD.
Citations:
🌐 Web query:
gRPC-Go latest version releases 2026
💡 Result:
The latest version of gRPC-Go is v1.81.0, released on 2026-05-04. The previous version is v1.80.0, released on 2026-04-01. As of today (2026-05-04), v1.81.0 is the most recent stable release listed on the official GitHub releases page and pkg.go.dev.
Citations:
- 1: https://github.com/grpc/grpc-go/releases
- 2: https://github.com/grpc/grpc-go/releases/tag/v1.81.0
- 3: https://github.com/grpc/grpc-go/releases/tag/v1.80.0
- 4: https://pkg.go.dev/google.golang.org/grpc
Upgrade google.golang.org/grpc to address GHSA-p77j-4mvh-x3m3 authorization bypass.
Your go.mod pins google.golang.org/grpc v1.72.2 (indirect), which is affected by GHSA-p77j-4mvh-x3m3. This vulnerability allows authorization bypass in gRPC-Go servers using path-based authorization when HTTP/2 :path pseudo-headers lack the mandatory leading slash. Update to v1.81.0 (or at minimum v1.79.3 where the fix was released).
✅ Proposed change
- google.golang.org/grpc v1.72.2 // indirect
+ google.golang.org/grpc v1.81.0 // indirectReference: GHSA-p77j-4mvh-x3m3 / CVE-2026-33186
📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
Suggested change
| google.golang.org/grpc v1.72.2 // indirect | |
| google.golang.org/grpc v1.81.0 // indirect |
🧰 Tools
🪛 OSV Scanner (2.3.5)
[CRITICAL] 55-55: google.golang.org/grpc 1.72.2: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc
(GO-2026-4762)
[CRITICAL] 55-55: google.golang.org/grpc 1.72.2: gRPC-Go has an authorization bypass via missing leading slash in :path
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@go.mod` at line 55, The go.mod currently pins the indirect dependency
google.golang.org/grpc at v1.72.2 which is affected by GHSA-p77j-4mvh-x3m3;
update the module requirement for google.golang.org/grpc to a fixed release
(preferably v1.81.0 or at minimum v1.79.3) and run `go get`/`go mod tidy` to
refresh the lockfile so the resolved version is upgraded across the build.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the golang group with 9 updates in the / directory:
0.13.00.14.11.1.11.2.022.6.022.7.05.1.05.2.21.0.121.0.132.25.12.28.31.12.01.13.10.6.20.7.00.0.180.0.21Updates
github.com/Microsoft/hcsshimfrom 0.13.0 to 0.14.1Release notes
Sourced from github.com/Microsoft/hcsshim's releases.
... (truncated)
Commits
fb5aa2eupgrade dependencies to fix CI9a434d6shim: skip SandboxPlatform validation when platform is not explicitly set (#2...98d74bbWCOW: restore support for client-mounted roots (#2595)59e0e2fBump actions/checkout from 4 to 5 (#2499)a776109Fix console size bug0366cb2Add default allow all policy to uvmboot144c633Fix CUDA for non-privileged containers (#2492)0842153Warn on incomplete vNUMA setting, clarify field names (#2466)1ee5fceMerge pull request #2456 from ambarve/hyperv_bcimsa2229bfMake a common utility function for appending VHD footerUpdates
github.com/buger/jsonparserfrom 1.1.1 to 1.2.0Release notes
Sourced from github.com/buger/jsonparser's releases.
Commits
c172c16Merge pull request #269 from buger/tinygo680cd2eMerge pull request #281 from buger/reqproof-assurance-hardening9dce61cMigrate review storage from reviews/ folder to per-requirement timestampsc03b9effeat: add property-based obligation classes with 24 new SYS-REQs9c46110chore: fix spec lint warnings — remove stale parent field, set review metadata8bbb8a8Close coverage gaps: SYS-REQ-007/008/010 fuzz harness coverage to 100%552e93bInstall Z3 via apt before audit98133b4Remove manual Z3 pre-download, now handled by proof-action1b70eadDebug Z3 pre-download: remove output suppressionaac1fbcPre-download Z3 solver before auditUpdates
github.com/coreos/go-systemd/v22from 22.6.0 to 22.7.0Release notes
Sourced from github.com/coreos/go-systemd/v22's releases.
Commits
4dc4ee6activation: stub out for plan98f5a75cdbus: add StartTransientUnitAux for starting transient units with auxiliary u...9211a7bactivation: add FilesWithNames()2c3ebeddbus: dedup result conversion codeaac8e00unit: fix Deserialize deprecation noticed4795ceFix doc referencesabb50b3dbus: allow multiple calls for the same unit to *Unit27f6beaactivation: simplify ListenersWithNamese615438sdjournal: fix copyrightsd25876dimport1: add missing close method to connUpdates
github.com/godbus/dbus/v5from 5.1.0 to 5.2.2Release notes
Sourced from github.com/godbus/dbus/v5's releases.
... (truncated)
Commits
a8ac15bMerge pull request #427 from dims/drop-unused-import-in-windows-specific-codee638c72Drop ununsed import in windows specific code20d95a3Merge pull request #422 from kolyshkin/homedird3fc3b5Fix and simplify getHomeDir88ce463Merge pull request #419 from kolyshkin/golangci-v2feb892aci: bump golangci-lint to v2c5ff039Ignore ST1008 warning for validSingle135663eOmit embedded fields1b92cdcvariant_parser: simplify switch statementd03c0beUse switch where it makes senseUpdates
github.com/mattn/go-shellwordsfrom 1.0.12 to 1.0.13Commits
fd1aa6cRun gofmt: add missing //go:build directives and trailing newlinese73986eTreat bare ')' as syntax error regardless of ParseBacktick9a78803Merge pull request #60 from scumfrog/security-fix-cveb074fa0fix: preserve parser compatibility for unmatched ')' handling735b5e8Implement tests for shellwords parser functionalitye2951fcFix dollarQuote state management in shellwords.go551a1d0Update CI: Go 1.25/1.26 and latest GitHub Actionsf3bbb6fMerge pull request #53 from ndeloof/masterf6737feparse\tas TAB, not escapedtUpdates
github.com/onsi/ginkgo/v2from 2.25.1 to 2.28.3Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
... (truncated)
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
... (truncated)
Commits
5de9c15v2.28.37e2fa19bump dependencies1a81912v2.28.2f3a36b6Add ArtifactDir() to support Go 1.26 testing.TB interface94151c8Implement shell completion4d21dbbAdd asan CLI option mirroring msan implementationc102161Bump uri from 1.0.3 to 1.0.4 in /docs (#1630)9619647fix aspect ratio5779304update logos5d1d628v2.28.1Updates
github.com/onsi/gomegafrom 1.38.1 to 1.40.0Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
87ee9d3v1.40.0ea66027v1.40.0 (full)e3fd789update docs to reflect new versioning strategy7d4ee30first push to master-litee4a82d1Bump github/codeql-action from 3 to 4 (#875)af62723Bump rexml from 3.4.0 to 3.4.2 in /docs (#870)e164221Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1 (#895)334a282Bump faraday from 2.12.2 to 2.14.1 in /docs (#896)1a25a36v1.39.1406faeebump all depsUpdates
github.com/opencontainers/selinuxfrom 1.12.0 to 1.13.1Release notes
Sourced from github.com/opencontainers/selinux's releases.
Commits
5647f06Merge pull request #242 from Luap99/securejoin69a52b8downgrade github.com/cyphar/filepath-securejoin to v0.5.16950c32Merge pull request #240 from opencontainers/dependabot/github_actions/golangc...9a88c88build(deps): bump golangci/golangci-lint-action from 8 to 94be9937Merge pull request #237 from cyphar/selinux-safe-procfsc8cfa6fselinux: migrate to pathrs-lite procfs APIf2424d8Merge pull request #236 from kolyshkin/modernize-ci648ce7fci: add go 1.25916cab9ci: bump golangci-lint to v2.5b42e5c8all: format sources with latest gofumptUpdates
github.com/safchain/ethtoolfrom 0.6.2 to 0.7.0Release notes
Sourced from github.com/safchain/ethtool's releases.
Commits
fcfc2cdBump golang.org/x/sys from 0.36.0 to 0.38.0 (#115)4136bc9Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#114)d497949bump go version (#116)95c1c1bBump actions/setup-go from 5.5.0 to 6.0.0 (#111)24b5407Bump golang.org/x/sys from 0.34.0 to 0.36.0 (#112)Updates
golang.org/x/sysfrom 0.35.0 to 0.43.0Commits
f33a730windows: support nil security descriptor on GetNamedSecurityInfo493d172cpu: add runtime import in cpu_darwin_arm64_other.go2c2be75windows: use syscall.SyscallN in Proc.Calla76ec62cpu: roll back "use IsProcessorFeaturePresent to calculate ARM64 on windows"eaaaaeewindows/registry: correct KeyInfo.ModTime calculation942780bcpu: darwin/arm64 feature detectionacef388unix/linux: Prefixmsg and PrefixCacheinfo structs3687fbdcpu: better defaults on darwin ARM6448062e9plan9: change Note to alias syscall.Note4f23f80windows: change Signal to alias syscall.SignalUpdates
sigs.k8s.io/knftablesfrom 0.0.18 to 0.0.21Changelog
Sourced from sigs.k8s.io/knftables's changelog.
... (truncated)
Commits
4533189v0.0.213c18540Belatedly add issue links to CHANGELOG.md15df2ffAdd another note to the README about nft versions09eabefMerge pull request #40 from danwinship/list-terse