Skip to content

Bump go directive to 1.27.3 and clear remaining dependency findings. - #4585

Open
ValClarkson wants to merge 1 commit into
CrunchyData:mainfrom
ValClarkson:deps/go-1.27.3-main
Open

ValClarkson wants to merge 1 commit into
CrunchyData:mainfrom
ValClarkson:deps/go-1.27.3-main

Conversation

@ValClarkson

Copy link
Copy Markdown
Contributor

Moves the go directive from 1.26.6 to 1.27.3 so the x/net and x/crypto fixes are usable. Bumps cel-go to v0.30.0 (GHSA-gcjh-h69q-9w9g) and pins x/crypto to the untagged commit that fixes GO-2026-5932 (openpgp), which no code here imports.

Moves the go directive from 1.26.6 to 1.27.3 so the x/net and x/crypto fixes
are usable. Bumps cel-go to v0.30.0 (GHSA-gcjh-h69q-9w9g) and pins x/crypto to
the untagged commit that fixes GO-2026-5932 (openpgp), which no code here
imports. Kubernetes stays on 0.36.

Co-authored-by: Cursor <cursoragent@cursor.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant