CSPL-4153: Update dependencies to fix security vulnerabilities#1809
Open
gabrielm-splunk wants to merge 2 commits intodevelopfrom
Open
CSPL-4153: Update dependencies to fix security vulnerabilities#1809gabrielm-splunk wants to merge 2 commits intodevelopfrom
gabrielm-splunk wants to merge 2 commits intodevelopfrom
Conversation
Collaborator
Author
|
✅ Unit Tests Passed All unit tests completed successfully:
🔍 Container Scan Pipeline Triggered
|
kasiakoziol
approved these changes
Apr 2, 2026
kasiakoziol
reviewed
Apr 2, 2026
kasiakoziol
requested changes
Apr 2, 2026
Collaborator
Author
|
✅ Go Version Updated in All Locations Updated additional Go version references as requested: Files Updated:
Verification:
Changes pushed in: 269658b Ready for re-review! 🚀 |
- Update google.golang.org/grpc from v1.78.0 to v1.79.3 (VULN-67797) - Update github.com/buger/jsonparser from v1.1.1 to v1.1.2 (VULN-67794) - Update Go stdlib from 1.25.7 to 1.25.8 (VULN-65734) - Update gnutls via explicit microdnf update (VULN-69140) - Update other dependencies to latest compatible versions Fixes: VULN-67797, VULN-67794, VULN-65734, VULN-69140 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
- Update GO_VERSION in .env: 1.25.7 → 1.25.8 - Update Dockerfile.distroless FROM golang:1.25.7 → 1.25.8 Addresses review comment to update all Go version occurrences. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
269658b to
5a463a1
Compare
Collaborator
Author
|
🔄 Commits Updated Force-pushed to clean up commit history with proper author name and DCO signoff for GitLab compatibility. All changes remain the same:
Ready for re-review! |
kasiakoziol
approved these changes
Apr 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Updates dependencies to address security vulnerabilities identified in VULN tickets.
Changes
go get -uTesting
Next Steps
Related Issues
🤖 Generated with Claude Code