Skip to content

bump: go-utils 0.30.1 fixes trivy scans - #11357

Open
chandler-solo wants to merge 8 commits into
mainfrom
chandler/gloo-really-goutils-0-30-1
Open

bump: go-utils 0.30.1 fixes trivy scans#11357
chandler-solo wants to merge 8 commits into
mainfrom
chandler/gloo-really-goutils-0-30-1

Conversation

@chandler-solo

Copy link
Copy Markdown

Description

  • Bump github.com/solo-io/go-utils from v0.30.0 to v0.30.1.
  • Update the Go directive to 1.26.5, as required by go-utils v0.30.1.
  • Refresh the corresponding module checksums.

Trivy versioning note

This continues to use the latest Trivy release. That leaves us exposed to future breaking CLI changes without an accompanying change in this repository, similar to Trivy 0.70.0 changing the behavior of --template.

An alternative would be to pin Trivy to 0.72.0 for more deterministic builds and upgrade it intentionally in follow-up changes.

Validation

  • go mod tidy -diff
  • go mod verify
  • Targeted Go tests
  • git diff --check

API changes

Code changes

CI changes

Docs changes

Context

Interesting decisions

Testing steps

Notes for reviewers

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works

## Summary

- Bump `github.com/solo-io/go-utils` from `v0.30.0` to `v0.30.1`.
- Update the Go directive to `1.26.5`, as required by `go-utils v0.30.1`.
- Refresh the corresponding module checksums.

## Trivy versioning note

This continues to use the `latest` Trivy release. That leaves us exposed to future breaking CLI changes without an accompanying change in this repository, similar to Trivy `0.70.0` changing the behavior of `--template`.

An alternative would be to pin Trivy to `0.72.0` for more deterministic builds and upgrade it intentionally in follow-up changes.

## Validation

- `go mod tidy -diff`
- `go mod verify`
- Targeted Go tests
- `git diff --check`

Signed-off-by: David L. Chandler <david.chandler@solo.io>
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown

Visit the preview URL for this PR (updated for commit d18beff):

https://gloo-edge--pr11357-chandler-gloo-really-nz8xlewm.web.app

(expires Wed, 19 Aug 2026 02:05:47 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 77c2b86e287749579b7ff9cadb81e099042ef677

Signed-off-by: David L. Chandler <david.chandler@solo.io>
Signed-off-by: David L. Chandler <david.chandler@solo.io>
Signed-off-by: David L. Chandler <david.chandler@solo.io>
@chandler-solo

Copy link
Copy Markdown
Author

/skip-changelog

Signed-off-by: David L. Chandler <david.chandler@solo.io>
…lly-goutils-0-30-1' into chandler/gloo-really-goutils-0-30-1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants