-
Notifications
You must be signed in to change notification settings - Fork 3
chore: update base images and Golang dependencies #1846
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
0284794 to
c3c3d7a
Compare
|
Workflow has started. The target step completed with status: failure. |
|
Workflow has started. The target step completed with status: failure. |
|
Workflow has started. The target step completed with status: failure. |
|
Workflow has started. The target step completed with status: failure. |
c3c3d7a to
ce350d7
Compare
|
Workflow has started. The target step completed with status: failure. |
Signed-off-by: Roman Sysoev <[email protected]>
Signed-off-by: Roman Sysoev <[email protected]>
- git - binutils - make - gcc Signed-off-by: Roman Sysoev <[email protected]>
ce350d7 to
ccc2906
Compare
|
Workflow has started. The target step completed with status: failure. |
- Used the builder/golang-alt image instead of builder/alt and package installation. - Updated base image to Golang 1.24.11 to resolve CVE-2025-61729. - Updated golang.org/x/crypto to version 0.45.0 to resolve CVE-2025-47914. Signed-off-by: Roman Sysoev <[email protected]> (cherry picked from commit 95f95e4)
Description
Why do we need it, and what problem does it solve?
This is required to resolve CVE-2025-61729 and CVE-2025-47914.
What is the expected result?
The security check should pass.
Checklist
Changelog entries