Skip to content

Bump golang to 1.25 to fix CVEs.#245

Merged
kaovilai merged 1 commit intovmware-tanzu:mainfrom
blackpiglet:bump_golang_1.25
Feb 9, 2026
Merged

Bump golang to 1.25 to fix CVEs.#245
kaovilai merged 1 commit intovmware-tanzu:mainfrom
blackpiglet:bump_golang_1.25

Conversation

@blackpiglet
Copy link
Collaborator

Bump golang.org/x/crypto to v0.45.0 to fix CVEs:

@codecov-commenter
Copy link

codecov-commenter commented Feb 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 27.53%. Comparing base (5e94ed2) to head (2b69bf1).

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #245      +/-   ##
==========================================
+ Coverage   27.39%   27.53%   +0.14%     
==========================================
  Files           4        4              
  Lines         595      443     -152     
==========================================
- Hits          163      122      -41     
+ Misses        420      309     -111     
  Partials       12       12              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

ywk253100
ywk253100 previously approved these changes Feb 9, 2026
Lyndon-Li
Lyndon-Li previously approved these changes Feb 9, 2026
Bump golang.org/x/crypto to v0.45.0 to fix CVEs:
* CVE-2025-47914
* CVE-2025-58181

Modify GitHub action.

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
@kaovilai kaovilai merged commit 2cb9bfc into vmware-tanzu:main Feb 9, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants