Skip to content

bump all golang.org/x deps to fix a bunch of CVEs#179

Merged
kcp-ci-bot merged 1 commit into
kcp-dev:mainfrom
xrstf:bump-deps
Jul 14, 2026
Merged

bump all golang.org/x deps to fix a bunch of CVEs#179
kcp-ci-bot merged 1 commit into
kcp-dev:mainfrom
xrstf:bump-deps

Conversation

@xrstf

@xrstf xrstf commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

Dependabot or code scanning QL or something reported a bunch of CVEs in various golang.org/x modules, spread across practically all of the kcp related repos. This PR is one step to fix them all.

What Type of PR Is This?

/kind chore

Release Notes

NONE

On-behalf-of: @SAP christoph.mewes@sap.com

Signed-off-by: Christoph Mewes <christoph@kubermatic.com>
@kcp-ci-bot kcp-ci-bot added kind/chore Categorizes issue or PR as related to maintenance and other usually non-code changes. release-note-none Denotes a PR that doesn't merit a release note. dco-signoff: yes Indicates the PR's author has signed the DCO. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Jul 14, 2026

@xmudrii xmudrii left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@kcp-ci-bot kcp-ci-bot added the lgtm Indicates that a PR is ready to be merged. label Jul 14, 2026
@kcp-ci-bot

Copy link
Copy Markdown
Contributor

LGTM label has been added.

DetailsGit tree hash: 0a0012d5a40a5191abe439cb70e9338ec13cfac7

@xrstf

xrstf commented Jul 14, 2026

Copy link
Copy Markdown
Contributor Author

/approve

@kcp-ci-bot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: xmudrii, xrstf

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kcp-ci-bot kcp-ci-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 14, 2026
@kcp-ci-bot kcp-ci-bot merged commit e5fa433 into kcp-dev:main Jul 14, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has signed the DCO. kind/chore Categorizes issue or PR as related to maintenance and other usually non-code changes. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesn't merit a release note. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants