Skip to content

Bump google.golang.org/grpc to v1.79.3 to fix CVEs#553

Merged
smerkviladze merged 1 commit intoMirantis:masterfrom
smerkviladze:bump-grpc-to-v1.79.3
Apr 27, 2026
Merged

Bump google.golang.org/grpc to v1.79.3 to fix CVEs#553
smerkviladze merged 1 commit intoMirantis:masterfrom
smerkviladze:bump-grpc-to-v1.79.3

Conversation

@smerkviladze
Copy link
Copy Markdown
Contributor

Fixes CVE-2026-33186

Updates google.golang.org/grpc from v1.62.1 to v1.79.3.

Removes unused google.golang.org/grpc/naming replace directive:

  • Nothing in the module graph or source code imports google.golang.org/grpc/naming. The version-less left-hand side prevented go mod tidy from dropping it automatically.

Signed-off-by: Sopho Merkviladze <smerkviladze@mirantis.com>
Copy link
Copy Markdown
Contributor

@athongsamai athongsamai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@smerkviladze smerkviladze merged commit 246bd65 into Mirantis:master Apr 27, 2026
12 checks passed
@smerkviladze smerkviladze deleted the bump-grpc-to-v1.79.3 branch April 27, 2026 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants