Skip to content

[CVE] Update Go and dependencies for v1.17.9-gke.4#1313

Open
yaozile123 wants to merge 2 commits intoGoogleCloudPlatform:release-1.17from
yaozile123:cve-remediation-1.17.9
Open

[CVE] Update Go and dependencies for v1.17.9-gke.4#1313
yaozile123 wants to merge 2 commits intoGoogleCloudPlatform:release-1.17from
yaozile123:cve-remediation-1.17.9

Conversation

@yaozile123
Copy link
Copy Markdown
Collaborator

Remediates CVEs by updating Golang to 1.25.8 in all Dockerfiles and updating gRPC and go-jose dependencies. (Note: Missing releaser-new-branch=true label because it was not found in the repo)

Update golang to 1.25.8 in Dockerfiles, update google.golang.org/grpc to 1.79.3 and github.com/go-jose/go-jose/v4 to 4.1.4.
@google-oss-prow
Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: yaozile123

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gemini-code-assist
Copy link
Copy Markdown

Note

The number of changes in this pull request is too large for Gemini Code Assist to generate a review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant