Repository navigation

Fix critical Go runtime, HTTP/2, and CI tooling vulnerabilities - #21636

Merged

kylos101 merged 8 commits into

mainfrom

fix/critical-go-cves

Oct 20, 2026

Merged

Fix critical Go runtime, HTTP/2, and CI tooling vulnerabilities#21636
kylos101 merged 8 commits into
mainfrom
fix/critical-go-cves

Commits on Oct 20, 2026
- Fix critical Go CVEs from daily scan
  
  kylos101
  and
  codex
  committed
  00d6378
- Fix workspacekit sync message formatting for Go vet
  
  kylos101
  and
  codex
  committed
  d9d87f4
- Fix docker-up embedded x/net vulnerability
  
  kylos101
  and
  codex
  committed
  2f218f1
- Remove obsolete CI toolchain bootstrap after image promotion
  
  kylos101
  and
  codex
  committed
  23eddc8
- Fix critical vulnerabilities in standalone CI tooling dependencies
  
  kylos101
  and
  codex
  committed
  ebe2fdb
- Keep BuildKit binaries from the published Gitpod fork image
  
  kylos101
  and
  codex
  committed
  34fe892
- fix(image-builder): use refreshed Gitpod BuildKit image
  
  kylos101
  and
  codex
  committed
  a35ad02
- Use the published GHCR BuildKit image for Bob
  
  kylos101
  and
  codex
  committed
  c80f444