Skip to content

chore: switch runtime base to distroless static-debian13 and bump go to 1.26.10 - #379

Merged
ulucinar merged 1 commit into
crossplane-contrib:mainfrom
erhancagirici:distroless-debian13
Oct 23, 2026
Merged

ulucinar merged 1 commit into
crossplane-contrib:mainfrom
erhancagirici:distroless-debian13

Conversation

@erhancagirici

Copy link
Copy Markdown
Contributor

Description of your changes

  • Bump base image to gcr.io/distroless/static-debian13 as static-debian12 is EOL.
    • updates CA certificates
  • Bump go1.26.10

Addresses CVE-2026-111943

I have:

  • Read and followed Crossplane's [contribution process].
  • Added or updated unit tests for my change.

…to 1.26.10

Signed-off-by: Erhan Cagirici <erhan@upbound.io>

@ulucinar ulucinar left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @erhancagirici, lgtm.

@ulucinar
ulucinar merged commit 0f9c3f5 into crossplane-contrib:main Oct 23, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants