Skip to content

[release-3.6] bump dependencies with vulnerabilities - #22365

Merged
ivanvc merged 2 commits into
etcd-io:release-3.6from
ivanvc:release-3.6-silence-govulncheck-2026-08-31
Sep 1, 2026
Merged

[release-3.6] bump dependencies with vulnerabilities#22365
ivanvc merged 2 commits into
etcd-io:release-3.6from
ivanvc:release-3.6-silence-govulncheck-2026-08-31

Conversation

@ivanvc

@ivanvc ivanvc commented Aug 31, 2026

Copy link
Copy Markdown
Member

The govulncheck CI job is failing for release-3.6. Refer to: #22356 / https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/etcd-io_etcd/22356/pull-etcd-govulncheck/2094502728762920960

I bumped:

  • golang.org/x/net to v0.56.0
  • golang.org/x/text to v0.39.0
  • github.com/gorilla/websocket to v1.5.3

ivanvc added 2 commits August 31, 2026 15:08
Addresses CVE-2026-56852 / GO-2026-5970.

Signed-off-by: Ivan Valdes <ivan@vald.es>
Addresses GHSA-w67g-5rqw-f597 / GO-2026-6278.

Signed-off-by: Ivan Valdes <ivan@vald.es>
@codecov

codecov Bot commented Aug 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.70%. Comparing base (bba6944) to head (24c5b69).

Additional details and impacted files

see 175 files with indirect coverage changes

@@               Coverage Diff                @@
##           release-3.6   #22365       +/-   ##
================================================
+ Coverage        56.07%   68.70%   +12.63%     
================================================
  Files              402      417       +15     
  Lines            34555    35765     +1210     
================================================
+ Hits             19376    24573     +5197     
+ Misses           13570     9729     -3841     
+ Partials          1609     1463      -146     

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bba6944...24c5b69. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ivanvc

ivanvc commented Aug 31, 2026

Copy link
Copy Markdown
Member Author

/retest

@kubernetes-prow

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: fuweid, ivanvc
Once this PR has been reviewed and has the lgtm label, please assign serathius for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ivanvc
ivanvc merged commit c5540f2 into etcd-io:release-3.6 Sep 1, 2026
29 checks passed
@ivanvc
ivanvc deleted the release-3.6-silence-govulncheck-2026-08-31 branch September 1, 2026 21:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants