You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "Baoyuantop (via GitHub)" <gi...@apache.org> on 2026/05/29 06:51:25 UTC
[PR] chore(deps): fix dependabot security alerts [apisix-ingress-controller]
Baoyuantop opened a new pull request, #2773:
URL: https://github.com/apache/apisix-ingress-controller/pull/2773
### Summary
This PR updates Go module dependencies to resolve the current open Dependabot security alerts for:
- `google.golang.org/grpc`
- `go.opentelemetry.io/otel` and `go.opentelemetry.io/otel/sdk`
- `github.com/jackc/pgx/v5`
- `github.com/moby/spdystream`
- `filippo.io/edwards25519`
- AWS SDK for Go v2 eventstream, S3, Lambda, and CloudWatch Logs modules
It also raises the project Go version, toolchain, and GitHub Actions setup-go version from Go 1.24 to Go 1.25 because `github.com/jackc/pgx/v5@v5.9.2` requires Go 1.25 or newer.
### Validation
- `go mod tidy`
- `go list -m google.golang.org/grpc go.opentelemetry.io/otel go.opentelemetry.io/otel/sdk github.com/jackc/pgx/v5 github.com/moby/spdystream filippo.io/edwards25519 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream github.com/aws/aws-sdk-go-v2/service/s3 github.com/aws/aws-sdk-go-v2/service/lambda github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`
- `go vet ./api/... ./cmd/... ./internal/... ./pkg/...`
- `go test ./api/... ./cmd/... ./internal/... ./pkg/...`
- `make build`
`make test` was also attempted locally, but the local run could not complete because `setup-envtest` failed to fetch `kubebuilder-tools-1.30.0-darwin-arm64.tar.gz` from GCS with `401 Unauthorized`; the Go 1.25 downloaded toolchain in this environment also failed the `-coverprofile` path with `go: no such tool "covdata"`. The non-coverage test suite and build target completed successfully.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): fix dependabot security alerts [apisix-ingress-controller]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #2773:
URL: https://github.com/apache/apisix-ingress-controller/pull/2773#issuecomment-5448116066
This pull request/issue has been closed due to lack of activity. If you think that is incorrect, or the pull request requires review, you can revive the PR at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): fix dependabot security alerts [apisix-ingress-controller]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #2773:
URL: https://github.com/apache/apisix-ingress-controller/pull/2773#issuecomment-5111705938
This pull request has been marked as stale due to 60 days of inactivity. It will be closed in 30 days if no further activity occurs. If you think that's incorrect or this pull request should instead be reviewed, please simply write any comment. Even if closed, you can still revive the PR at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): fix dependabot security alerts [apisix-ingress-controller]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed pull request #2773: chore(deps): fix dependabot security alerts
URL: https://github.com/apache/apisix-ingress-controller/pull/2773
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org