Skip to content

fix: drop eMudhra roots, bump Go to 1.26.10 and patch vulnerable deps... - #199

Merged
kcp-ci-bot merged 2 commits into
kcp-dev:release-0.8from
ntnn:backport-emudhra
Nov 4, 2026
Merged

kcp-ci-bot merged 2 commits into
kcp-dev:release-0.8from
ntnn:backport-emudhra

Conversation

@ntnn

@ntnn ntnn commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

Summary

Backport of #196
Also backporting the crd generator image ref fix.

What Type of PR Is This?

/kind chore

Related Issue(s)

Fixes #

Release Notes

NONE

…kcp-dev#196)

* fix(image): drop compromised eMudhra roots and bump go to 1.26.10

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

* fix(deps): bump x/net to v0.62.0

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

* fix(deps): bump grpc to v1.83.1 and otel to v1.45.0

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

* fix(deps): bump cel-go to v0.30.0 and etcd client to v3.6.14

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

---------

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>
Co-authored-by: Nelo-T. Wallus <10514301+ntnn@users.noreply.github.com>
@kcp-ci-bot kcp-ci-bot added kind/chore Categorizes issue or PR as related to maintenance and other usually non-code changes. release-note-none Denotes a PR that doesn't merit a release note. dco-signoff: yes Indicates the PR's author has signed the DCO. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Nov 4, 2026
* Add new approvers to OWNERS file

* Update crd-docs-generator-location

Signed-off-by: Nelo-T. Wallus <git@ntnn.de>
Signed-off-by: Nelo-T. Wallus <n.wallus@sap.com>

---------

Signed-off-by: Nelo-T. Wallus <git@ntnn.de>
Signed-off-by: Nelo-T. Wallus <n.wallus@sap.com>
@ntnn

ntnn commented Nov 4, 2026

Copy link
Copy Markdown
Member Author

/test pull-api-syncagent-test-e2e-kcp-0.30

@mjudeikis

Copy link
Copy Markdown
Contributor

/lgtm
/approve

@kcp-ci-bot kcp-ci-bot added the lgtm Indicates that a PR is ready to be merged. label Nov 4, 2026
@kcp-ci-bot

Copy link
Copy Markdown
Contributor

LGTM label has been added.

DetailsGit tree hash: 9d0640487dbc4139bd06f265c7b4c1c524e82234

@ntnn

ntnn commented Nov 4, 2026

Copy link
Copy Markdown
Member Author

/approve

@ntnn ntnn added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 4, 2026
@kcp-ci-bot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: mjudeikis, ntnn

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kcp-ci-bot
kcp-ci-bot merged commit 4c72788 into kcp-dev:release-0.8 Nov 4, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has signed the DCO. kind/chore Categorizes issue or PR as related to maintenance and other usually non-code changes. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesn't merit a release note. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants