Skip to content

fix(cve): bump golang.org/x/net to v0.62.0 - #2123

Merged
tekton-robot merged 1 commit into
tektoncd:mainfrom
jkhelil:fix/SRVKP-15382-cve-go-deps-main
Nov 11, 2026
Merged

tekton-robot merged 1 commit into
tektoncd:mainfrom
jkhelil:fix/SRVKP-15382-cve-go-deps-main

Conversation

@jkhelil

@jkhelil jkhelil commented Nov 10, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Bump golang.org/x/net to v0.62.0

Test plan

  • CI unit tests / lint pass

/kind security

GovCloud image scan (pipelines-chains-controller-rhel9 / OSP 1.24.3)
requires golang.org/x/net >= 0.62.0 among fixable CVEs.

Related: SRVKP-15382

Signed-off-by: Jawed Khelil <jkhelil@redhat.com>
Assisted-by: Composer (via Cursor)
@tekton-robot tekton-robot added the kind/bug Categorizes issue or PR as related to a bug. label Nov 10, 2026
@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Nov 10, 2026
@codecov

codecov Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.23%. Comparing base (3b8b772) to head (605baa2).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2123   +/-   ##
=======================================
  Coverage   80.23%   80.23%           
=======================================
  Files          59       59           
  Lines        3395     3395           
=======================================
  Hits         2724     2724           
  Misses        669      669           
  Partials        2        2           
Flag Coverage Δ
unit-tests 80.23% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@jkhelil jkhelil left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 10, 2026
@jkhelil jkhelil changed the title fix(cve): bump golang.org/x/net to v0.62.0 for SRVKP-15382 fix(cve): bump golang.org/x/net to v0.62.0 Nov 10, 2026
@jkhelil jkhelil added kind/misc Categorizes issue or PR as a miscellaneuous one. and removed kind/bug Categorizes issue or PR as related to a bug. labels Nov 10, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: anithapriyanatarajan, jkhelil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:
  • OWNERS [anithapriyanatarajan,jkhelil]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@anithapriyanatarajan

Copy link
Copy Markdown
Contributor

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Nov 11, 2026
@tekton-robot
tekton-robot merged commit 42b7490 into tektoncd:main Nov 11, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/misc Categorizes issue or PR as a miscellaneuous one. lgtm Indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants