Skip to content

fix(deps): bump oras-go to v2.6.1#771

Merged
michaeljguarino merged 1 commit into
mainfrom
agent/remediate-oras-186e3d29
Jul 2, 2026
Merged

fix(deps): bump oras-go to v2.6.1#771
michaeljguarino merged 1 commit into
mainfrom
agent/remediate-oras-186e3d29

Conversation

@plural-copilot

@plural-copilot plural-copilot Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Summary

  • bump oras.land/oras-go/v2 from v2.6.0 to v2.6.1
  • keep the remediation minimal by avoiding a Helm parent bump because the direct module pin resolves the selected ORAS version
  • refresh go.sum entries for the updated module graph

Validation

  • go list -m oras.land/oras-go/v2 => oras.land/oras-go/v2 v2.6.1
  • confirmed the module graph selects github.com/pluralsh/plural-cli oras.land/oras-go/v2@v2.6.1

Plural Service: mgmt/console

@plural-copilot plural-copilot Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name Details
💬 Prompt Create a remediation PR in this repository for the actionable ORAS vulnerability attributed to the mgmt/console service....
🔗 Run history View run history

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedoras.land/​oras-go/​v2@​v2.6.0 ⏵ v2.6.173 +185 +1010010080

View full report

@michaeljguarino michaeljguarino merged commit 123c3ca into main Jul 2, 2026
14 of 15 checks passed
@michaeljguarino michaeljguarino deleted the agent/remediate-oras-186e3d29 branch July 2, 2026 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant