[release-4.12] OCPBUGS-79754: Bump google.golang.org/grpc to v1.79.3#533
Open
ocp-sustaining-admins wants to merge 1 commit into
Open
Conversation
openshift-ci-robot
added
jira/severity-important
Contributor
|
@ocp-sustaining-admins: This pull request references Jira Issue OCPBUGS-79754, which is invalid:
Comment The bug has been updated to refer to the pull request using the external bug tracker. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci-robot
added
the
jira/invalid-bug
WalkthroughThis PR updates multiple indirect dependencies in ChangesDependency Refresh
Estimated code review effort🎯 2 (Simple) | ⏱️ ~15 minutes Important Pre-merge checks failedPlease resolve all errors before merging. Addressing warnings is optional. ❌ Failed checks (1 error)
✅ Passed checks (11 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
openshift-ci
Bot
added
the
needs-ok-to-test
Contributor
|
Hi @ocp-sustaining-admins. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Tip We noticed you've done this a few times! Consider joining the org to skip this step and gain Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Contributor
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: ocp-sustaining-admins The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Member
|
@coderabbitai review |
✅ Actions performedReview triggered.
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 3
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
go.mod (1)
206-206:⚠️ Potential issue | 🟠 Major | ⚡ Quick winRemove or justify the golang.org/x/net version pinning.
Line 206 pins
golang.org/x/netto v0.17.0 via a replace directive, overriding the v0.26.0 update on line 162. Verification confirms v0.17.0 contains multiple unpatched security vulnerabilities (XSS, IPv6 proxy bypass, header limit bypass, and others) that are fixed in v0.26.0 and later versions. Without a documented reason for this downgrade, the replace directive introduces known security risks. Either remove it or add a comment explaining the necessity.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@go.mod` at line 206, The replace directive pinning golang.org/x/net to v0.17.0 must be removed or justified: either delete the "golang.org/x/net => golang.org/x/net v0.17.0" replace entry so the module can use the newer v0.26.0+ release, or add a clear comment immediately adjacent to that replace explaining exactly why v0.17.0 is required (including any compatibility constraints, CVE mitigation tradeoffs, and a plan/timestamp for revisiting), and add a security reviewer approval note; search for the replace string "golang.org/x/net => golang.org/x/net v0.17.0" to locate the entry to update.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@go.mod`:
- Line 163: Update the golang.org/x/oauth2 module from v0.18.0 to a safe
upstream release (>= v0.27.0, ideally v0.36.0) in go.mod and then run the Go
module commands to fetch and tidy dependencies (e.g., go get
golang.org/x/oauth2@v0.36.0 && go mod tidy) so the project builds with the
patched library; ensure any code importing oauth2 (import path
"golang.org/x/oauth2") is compatible and run unit tests to validate no
breakages.
- Line 137: Update the logrus dependency from v1.9.0 to v1.9.4 to address the
DoS vulnerabilities: edit the go.mod entry for github.com/sirupsen/logrus and
set the version to v1.9.4, then run go get github.com/sirupsen/logrus@v1.9.4 (or
go get ./... if you prefer) and go mod tidy to refresh go.sum; finally run your
test suite or build to ensure no import or API breakages in code using
logrus.Entry or Entry.Writer().
- Line 236: The PR title and the go.mod replace directive disagree: the title
says gRPC v1.79.3 but go.mod contains the replace of google.golang.org/grpc to
github.com/openshift-sustaining/grpc-go v1.64.1-sec.1; decide which is correct
and either (A) update the PR title/description to reflect that the intended bump
is to the OpenShift sustaining fork v1.64.1-sec.1, or (B) change the replace
directive to point to the actual v1.79.3 module you intended (or remove the
replace if not needed). Locate the replace line in go.mod (the line with
"replace google.golang.org/grpc => github.com/openshift-sustaining/grpc-go
v1.64.1-sec.1") and make the version/title consistent.
---
Outside diff comments:
In `@go.mod`:
- Line 206: The replace directive pinning golang.org/x/net to v0.17.0 must be
removed or justified: either delete the "golang.org/x/net => golang.org/x/net
v0.17.0" replace entry so the module can use the newer v0.26.0+ release, or add
a clear comment immediately adjacent to that replace explaining exactly why
v0.17.0 is required (including any compatibility constraints, CVE mitigation
tradeoffs, and a plan/timestamp for revisiting), and add a security reviewer
approval note; search for the replace string "golang.org/x/net =>
golang.org/x/net v0.17.0" to locate the entry to update.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: 378f3823-5a39-42ed-a44e-ff08ed64a2f0
⛔ Files ignored due to path filters (299)
go.sumis excluded by!**/*.sumvendor/github.com/cespare/xxhash/v2/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/testall.shis excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_arm64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_asm.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_other.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_safe.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cespare/xxhash/v2/xxhash_unsafe.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/.golangci.yamlis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/SECURITY.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/context.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/context_noslog.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/context_slog.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/discard.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/logr.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/sloghandler.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/slogr.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-logr/logr/slogsink.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/protobuf/jsonpb/decode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/protobuf/jsonpb/encode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/protobuf/jsonpb/json.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/protobuf/ptypes/any.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/compare.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/export.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/export_panic.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/internal/diff/diff.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/internal/value/pointer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/internal/value/pointer_purego.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/internal/value/zero.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/path.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/report_compare.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/report_reflect.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/report_slices.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/go-cmp/cmp/report_text.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/.travis.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/CHANGELOG.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/CONTRIBUTING.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/hash.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/node_js.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/time.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/uuid.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/version6.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/uuid/version7.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/.goreleaser.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/SECURITY.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/deflate.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/dict_decoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/fast_encoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/huffman_bit_writer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/huffman_code.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/huffman_sortByFreq.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level1.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level2.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level3.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level4.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level5.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/level6.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/flate/stateless.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/fse/compress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/fse/decompress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/bitreader.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/bitwriter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/compress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress_generic.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/internal/snapref/encode_other.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/blockdec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/blockenc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/bytebuf.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/decodeheader.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/decoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/decoder_options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/dict.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_base.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_best.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_better.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_dfast.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_fast.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/encoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/encoder_options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/framedec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/fse_decoder_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/history.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_arm64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_asm.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/internal/xxhash/xxhash_other.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/matchlen_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/matchlen_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/matchlen_generic.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec_generic.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/zstd.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/client_model/go/metrics.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/.travis.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/afero.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/appveyor.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/basepath.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/cacheOnReadFs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/const_bsds.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/const_win_unix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/copyOnWriteFs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/httpFs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/internal/common/adapters.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/iofs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/ioutil.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/mem/file.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/memmap.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/regexpfs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/symlink.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/unionFile.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/spf13/afero/util.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/assertion_compare.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/assertion_format.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/assertion_forward.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/assertion_order.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/assertions.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/stretchr/testify/assert/http_assertions.gois excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/Makefileis excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/opencensus.gois excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/trace/doc.gois excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/trace/lrumap.gois excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/trace/trace_go11.gois excluded by!**/vendor/**,!vendor/**vendor/go.opencensus.io/trace/trace_nongo11.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/internal/lazyregexp/lazyre.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/modfile/print.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/modfile/read.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/modfile/rule.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/modfile/work.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/module/module.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/module/pseudo.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/mod/semver/semver.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/net/context/ctxhttp/ctxhttp.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/AUTHORSis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/CONTRIBUTORSis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/README.mdis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/deviceauth.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/internal/client_appengine.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/internal/oauth2.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/internal/token.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/oauth2.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/pkce.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/oauth2/token.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sync/errgroup/errgroup.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sync/errgroup/go120.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sync/errgroup/pre_go120.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sync/semaphore/semaphore.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/asm_aix_ppc64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_aix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_arm64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gc_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gc_s390x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gc_x86.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gccgo_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gccgo_s390x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gccgo_x86.cis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_gccgo_x86.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_linux_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_linux_mips64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_linux_noinit.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_linux_ppc64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_loong64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_mips64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_mipsx.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_other_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_other_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_other_mips64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_other_ppc64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_other_riscv64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_ppc64x.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_riscv64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_s390x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_wasm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_x86.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/cpu_x86.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/endian_big.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/endian_little.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/proc_cpuinfo_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/runtime_auxv_go121.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/syscall_aix_gccgo.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/cpu/syscall_aix_ppc64_gc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/execabs/execabs_go118.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/execabs/execabs_go119.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/pwd_go15_plan9.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/pwd_plan9.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/race.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/race0.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/str.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/syscall.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/zsyscall_plan9_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/zsyscall_plan9_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/plan9/zsyscall_plan9_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/aliases.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_aix_ppc64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_386.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_arm.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_arm64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_ppc64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_bsd_riscv64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_386.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_arm.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_arm64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_loong64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_mips64x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_mipsx.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_ppc64x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_riscv64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_linux_s390x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_openbsd_mips64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_solaris_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/asm_zos_s390x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/bpxsvc_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/bpxsvc_zos.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/cap_freebsd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/constants.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/dev_aix_ppc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/dev_aix_ppc64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/dev_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/dirent.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/endian_big.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/endian_little.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/env_unix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/epoll_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/fcntl.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/fcntl_linux_32bit.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/fdset.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/fstatfs_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/gccgo.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/gccgo_c.cis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/gccgo_linux_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ifreq_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_signed.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_unsigned.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ioctl_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/mkerrors.shis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/mmap_nomremap.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/mremap.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/pagesize_unix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/pledge_openbsd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ptrace_darwin.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/ptrace_ios.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/race.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/race0.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/readdirent_getdents.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/readdirent_getdirentries.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/sockcmsg_unix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/sockcmsg_unix_other.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/sockcmsg_zos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/symaddr_zos_s390x.sis excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_aix.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_aix_ppc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_aix_ppc64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_bsd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_darwin_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_darwin_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_darwin_libSystem.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_dragonfly_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_freebsd_riscv64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_hurd.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_hurd_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_illumos.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_alarm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_amd64_gc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_arm.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_arm64.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_gc.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_gc_386.gois excluded by!**/vendor/**,!vendor/**vendor/golang.org/x/sys/unix/syscall_linux_gc_arm.gois excluded by!**/vendor/**,!vendor/**
📒 Files selected for processing (1)
go.mod
| github.com/rivo/uniseg v0.2.0 // indirect | ||
| github.com/russross/blackfriday v1.6.0 // indirect | ||
| github.com/seccomp/libseccomp-golang v0.10.0 // indirect | ||
| github.com/sirupsen/logrus v1.9.0 // indirect |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check what is using logrus and if we can upgrade
echo "=== Direct dependencies requiring logrus ==="
rg "github.com/sirupsen/logrus" go.mod -A 1 -B 1
# Check for latest logrus version and security advisories
curl -s https://pypi.org/pypi/logrus/json 2>/dev/null || echo "Not a Python package"
curl -s https://proxy.golang.org/github.com/sirupsen/logrus/@v/list | tail -5Repository: openshift/builder
Length of output: 14947
🌐 Web query:
What is the latest version of github.com/sirupsen/logrus and does it fix the DoS vulnerabilities GO-2025-4188 and GHSA-4f99-4q7p-p3gh?
💡 Result:
Latest github.com/sirupsen/logrus version (as of 2026-05-14): v1.9.4 [1][2][3]. Does v1.9.4 fix the DoS vulnerabilities GO-2025-4188 and GHSA-4f99-4q7p-p3gh? Yes. These advisories describe a DoS when using Entry.Writer/Writer (or Entry.writerScanner) with a single-line payload >64KB without newlines, affecting logrus versions < 1.8.3 and specific 1.9.x ranges [4][5][6]. They state the issue is fixed in 1.8.3/1.9.1/1.9.3+ (i.e., versions at or above those fix releases) [4][6][5]. Since v1.9.4 is 1.9.3+ (and the logrus changelog notes repeated fixes for the >64KB single-line Writer DoS in 1.9.1/1.9.3) [7], v1.9.4 should be fixed for GHSA-4f99-4q7p-p3gh and thus also for GO-2025-4188 (which lists the GHSA as an alias/reference) [4].
Citations:
- 1: https://github.com/sirupsen/logrus?tab=readme-ov-file
- 2: https://github.com/sirupsen/logrus
- 3: https://pkg.go.dev/github.com/sirupsen/logrus
- 4: https://pkg.go.dev/vuln/GO-2025-4188
- 5: https://nvd.nist.gov/vuln/detail/CVE-2025-65637
- 6: x/vulndb: potential Go vuln in github.com/sirupsen/logrus: GHSA-4f99-4q7p-p3gh golang/vulndb#4188
- 7: https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md
Upgrade logrus to v1.9.4 to fix HIGH severity DoS vulnerabilities.
github.com/sirupsen/logrus v1.9.0 contains two HIGH severity DoS vulnerabilities:
- GO-2025-4188: DoS when using Entry.writerScanner with large single-line payloads (>64KB without newlines)
- GHSA-4f99-4q7p-p3gh: DoS when using Entry.Writer() with the same payload conditions
These are fixed in v1.9.4. Update the dependency to patch the vulnerability.
🧰 Tools
🪛 OSV Scanner (2.3.8)
[HIGH] 137-137: github.com/sirupsen/logrus 1.9.0: Logrus is vulnerable to DoS when using Entry.writerScanner in github.com/sirupsen/logrus
(GO-2025-4188)
[HIGH] 137-137: github.com/sirupsen/logrus 1.9.0: Logrus is vulnerable to DoS when using Entry.Writer()
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 137, Update the logrus dependency from v1.9.0 to v1.9.4 to
address the DoS vulnerabilities: edit the go.mod entry for
github.com/sirupsen/logrus and set the version to v1.9.4, then run go get
github.com/sirupsen/logrus@v1.9.4 (or go get ./... if you prefer) and go mod
tidy to refresh go.sum; finally run your test suite or build to ensure no import
or API breakages in code using logrus.Entry or Entry.Writer().
| golang.org/x/crypto v0.19.0 // indirect | ||
| golang.org/x/mod v0.17.0 // indirect | ||
| golang.org/x/net v0.26.0 // indirect | ||
| golang.org/x/oauth2 v0.18.0 // indirect |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check latest oauth2 version
curl -s https://proxy.golang.org/golang.org/x/oauth2/@v/list | tail -5
# Check what requires oauth2
echo -e "\n=== Dependencies requiring oauth2 ==="
rg "golang.org/x/oauth2" go.mod -B 2 -A 2Repository: openshift/builder
Length of output: 333
🌐 Web query:
What is the latest version of golang.org/x/oauth2 and does it fix vulnerabilities GO-2025-3488 and GHSA-6v2p-p543-phr9?
💡 Result:
The latest version of golang.org/x/oauth2 (as of 2026-05-14) is v0.36.0. [1] Does the latest version fix vulnerabilities GO-2025-3488 and GHSA-6v2p-p543-phr9? Yes. Both GO-2025-3488 and GHSA-6v2p-p543-phr9 are described as being fixed starting in golang.org/x/oauth2 v0.27.0 (affected “before v0.27.0”). [2][3] Since v0.36.0 is greater than v0.27.0, upgrading to v0.36.0 addresses these issues. [1][2][3] Supporting details: - GO-2025-3488 affects golang.org/x/oauth2 versions “before v0.27.0”. [2] - GHSA-6v2p-p543-phr9 affects golang.org/x/oauth2 versions “before v0.27.0”. [3] - The oauth2 v0.27.0 tag includes a fix commit “jws: split token into fixed number of parts” and references fixes for CVE-2025-22868 / GO-2025-3488. [4]
Citations:
- 1: https://pkg.go.dev/golang.org/x/oauth2@v0.34.0
- 2: https://pkg.go.dev/vuln/GO-2025-3488
- 3: https://osv.dev/vulnerability/GHSA-6v2p-p543-phr9
- 4: https://go.googlesource.com/oauth2/+/refs/tags/v0.27.0
Upgrade golang.org/x/oauth2 to v0.27.0 or later (currently v0.18.0).
The current version has HIGH severity vulnerabilities:
- GO-2025-3488: Unexpected memory consumption during token parsing
- GHSA-6v2p-p543-phr9: Improper Validation of Syntactic Correctness of Input
Both are fixed in v0.27.0+. Latest version is v0.36.0.
🧰 Tools
🪛 OSV Scanner (2.3.8)
[HIGH] 163-163: golang.org/x/oauth2 0.18.0: Unexpected memory consumption during token parsing in golang.org/x/oauth2
(GO-2025-3488)
[HIGH] 163-163: golang.org/x/oauth2 0.18.0: golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 163, Update the golang.org/x/oauth2 module from v0.18.0 to a
safe upstream release (>= v0.27.0, ideally v0.36.0) in go.mod and then run the
Go module commands to fetch and tidy dependencies (e.g., go get
golang.org/x/oauth2@v0.36.0 && go mod tidy) so the project builds with the
patched library; ensure any code importing oauth2 (import path
"golang.org/x/oauth2") is compatible and run unit tests to validate no
breakages.
| k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.25.2 | ||
| ) | ||
|
|
||
| replace google.golang.org/grpc => github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check if the openshift-sustaining fork and version exist and gather release information
gh api repos/openshift-sustaining/grpc-go/tags --jq '.[] | select(.name | contains("v1.64.1-sec")) | {name: .name, commit: .commit.sha}'
# Check for any security-related information in the fork
gh api repos/openshift-sustaining/grpc-go/releases --jq '.[] | select(.tag_name | contains("v1.64.1-sec")) | {tag: .tag_name, name: .name, body: .body}'Repository: openshift/builder
Length of output: 450
🌐 Web query:
Does grpc-go v1.64.1-sec.1 from openshift-sustaining fork correspond to google.golang.org/grpc v1.79.3 or address CVE-2026-33186?
💡 Result:
No, grpc-go v1.64.1-sec.1 from the openshift-sustaining fork does not correspond to google.golang.org/grpc v1.79.3, and it does not address CVE-2026-33186.[1][2]
Citations:
- 1: https://nvd.nist.gov/vuln/detail/CVE-2026-33186
- 2: security: CVE-2026-33186 — google.golang.org/grpc Authorization Bypass (CVSS 9.1 Critical) DataDog/datadog-agent#48151
Update PR title or explain the version discrepancy.
The PR title claims to bump gRPC to v1.79.3, but the replace directive uses github.com/openshift-sustaining/grpc-go v1.64.1-sec.1. While the OpenShift sustaining fork's v1.64.1-sec.1 release does address CVE-2026-33186 (as documented in its official release notes), these are different versions. Clarify whether the title is incorrect or if v1.64.1-sec.1 is the intended version.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 236, The PR title and the go.mod replace directive disagree:
the title says gRPC v1.79.3 but go.mod contains the replace of
google.golang.org/grpc to github.com/openshift-sustaining/grpc-go v1.64.1-sec.1;
decide which is correct and either (A) update the PR title/description to
reflect that the intended bump is to the OpenShift sustaining fork
v1.64.1-sec.1, or (B) change the replace directive to point to the actual
v1.79.3 module you intended (or remove the replace if not needed). Locate the
replace line in go.mod (the line with "replace google.golang.org/grpc =>
github.com/openshift-sustaining/grpc-go v1.64.1-sec.1") and make the
version/title consistent.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This is an automated PR from the ARC system.
Go version used:
go1.19.13Patch applied:
github.com/openshift-sustaining/grpc-go@v1.64.1-sec.1Modules affected:
.The commands used to generate this PR were:
A member of the Red Hat Openshift Sustaining Team will review the PR and take appropriate action.
Summary by CodeRabbit