HYPERFLEET-846 - fix: bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186 (#95)#100
Conversation
…2026-33186 (openshift-hyperfleet#95) - Bumps `google.golang.org/grpc` from v1.79.2 to v1.79.3 to remediate CVE-2026-33186 (CVSS 9.1 - authorization bypass via missing leading slash in `:path`) - See also: openshift-hyperfleet/hyperfleet-sentinel PR for the same fix - [x] `go build ./...` passes - [x] Unit tests pass - [ ] CI pipeline passes Relates to: [HYPERFLEET-846](https://redhat.atlassian.net/browse/HYPERFLEET-846) <!-- This is an auto-generated comment: release notes by coderabbit.ai --> * **Chores** * Updated a dependency to the latest version. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
/test images-images |
|
@86254860: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
This is an manually cherry-pick of #95
/assign 86254860