You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@yunikorn.apache.org by "Wilfred Spiegelenburg (Jira)" <ji...@apache.org> on 2026/09/02 11:59:00 UTC

[jira] [Comment Edited] (YUNIKORN-3435) upgrade go dependencies for CVEs

    [ https://issues.apache.org/jira/browse/YUNIKORN-3435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18110620#comment-18110620 ] 

Wilfred Spiegelenburg edited comment on YUNIKORN-3435 at 9/2/26 11:58 AM:
--------------------------------------------------------------------------

I also committed the changes for the gRPC version in the SI so lets pick up both in one go.

See the comment in the PR for the pseudo version update.


was (Author: wifreds):
I also committed the changes for the gRPC version in the SI so lets pick up both in one go.

> upgrade go dependencies for CVEs
> --------------------------------
>
>                 Key: YUNIKORN-3435
>                 URL: https://issues.apache.org/jira/browse/YUNIKORN-3435
>             Project: Apache YuniKorn
>          Issue Type: Improvement
>          Components: core - scheduler, shim - kubernetes, webapp
>            Reporter: Wilfred Spiegelenburg
>            Assignee: weichen lai
>            Priority: Major
>              Labels: newbie, pull-request-available
>
> Two high CVEs in these dependencies
>  * golang.org/x/text
>  * golang.org/x/net
> -Should also consider moving to the latest K8s 1.36.4  version- this is already handled in YUNIKORN-3300



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org