🌱 xport-9.1.1 OSS Updates#1594
Open
brito-rafa wants to merge 3 commits into
Open
Conversation
The updated version addresses the following CVEs: CVE-2026-32282 CVE-2026-32289 CVE-2026-33810 CVE-2026-27144 CVE-2026-27143 CVE-2026-32288 CVE-2026-32283 CVE-2026-27140 Signed-off-by: Rafael Brito <rafael.brito@broadcom.com>
This patch bumps onsi/gomega module to v1.40.0, k8s.io/klog/v2 to v2.140.0, and golang.org/x/text to v0.36.0 (with respective pre-reqs). Signed-off-by: Rafael Brito <rafael.brito@broadcom.com>
80a1050 to
70ac5e5
Compare
…nd prometheus client to 1.23.2 This patch updates the Kubernetes libraries from 0.34.1 to 0.36.0, controller-runtime from 0.22.3 to 0.24.0, prometheus/client_golang from 1.22.0 to 1.23.2, and other dependencies. We intentionally took a minimalist approach to provide immediate support for v0.24.0 without introducing the complexity of a full refactor to adopt controller-runtime modern methods. Signed-off-by: Rafael Brito <rafael.brito@broadcom.com>
70ac5e5 to
7812c4e
Compare
Minimum allowed line rate is |
bryanv
approved these changes
May 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do, and why is it needed?
Cross-Port of Updates of OSS Modules and Go
For the controller-runtime v0.24.0, we intentionally took a minimalist approach to support it without introducing the
complexity of a full refactor to adopt controller-runtime modern methods.
Which issue(s) is/are addressed by this PR? (optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)format, will close the issue(s) when PR gets merged):Fixes #
Are there any special notes for your reviewer:
There were two tweaks on the code replacing
EventRecorder.EventfbyEventRecorder.Event.Controller-runtime v0.24.0 has a strict constant format strings on Eventf callers and we were not passing it.
Please add a release note if necessary: