From 62171df151003f5f2af728b1e2a8a874aec54e57 Mon Sep 17 00:00:00 2001 From: Kevin Conner Date: Tue, 6 Oct 2026 09:46:17 -0700 Subject: [PATCH 1/2] fix: SECURESIGN-5667 update grpc to v1.82.2 Signed-off-by: Kevin Conner --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 4303f90a8..58355f3ba 100644 --- a/go.mod +++ b/go.mod @@ -41,7 +41,7 @@ require ( goa.design/goa/v3 v3.28.0 google.golang.org/api v0.290.0 google.golang.org/genproto/googleapis/api v0.0.0-20260723215102-3fe39f3c1018 - google.golang.org/grpc v1.82.1 + google.golang.org/grpc v1.82.2 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af sigs.k8s.io/release-utils v0.12.4 ) diff --git a/go.sum b/go.sum index 9ab3e71ae..a00c642c6 100644 --- a/go.sum +++ b/go.sum @@ -467,8 +467,8 @@ google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyac google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk= -google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE= -google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= +google.golang.org/grpc v1.82.2 h1:2+rCCTC8esfgjDFhN+rIok0FVsBLw/y5vHzNX2FjRLw= +google.golang.org/grpc v1.82.2/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI= google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From b51c41381a99de805db363835549d25bdf76f04d Mon Sep 17 00:00:00 2001 From: Kevin Conner Date: Wed, 7 Oct 2026 07:35:19 -0700 Subject: [PATCH 2/2] fix: updating grpc to address https://pkg.go.dev/vuln/GO-2026-6348 Signed-off-by: Kevin Conner --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 58355f3ba..a27420c9d 100644 --- a/go.mod +++ b/go.mod @@ -41,7 +41,7 @@ require ( goa.design/goa/v3 v3.28.0 google.golang.org/api v0.290.0 google.golang.org/genproto/googleapis/api v0.0.0-20260723215102-3fe39f3c1018 - google.golang.org/grpc v1.82.2 + google.golang.org/grpc v1.83.2 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af sigs.k8s.io/release-utils v0.12.4 ) diff --git a/go.sum b/go.sum index a00c642c6..0586a4f46 100644 --- a/go.sum +++ b/go.sum @@ -467,8 +467,8 @@ google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyac google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk= -google.golang.org/grpc v1.82.2 h1:2+rCCTC8esfgjDFhN+rIok0FVsBLw/y5vHzNX2FjRLw= -google.golang.org/grpc v1.82.2/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= +google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU= +google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8= google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI= google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=