Skip to content

google patch[deps]: fix release-2.53.5-gmp vulnerabilities#310

Merged
bwplotka merged 2 commits into
release-2.53.5-gmpfrom
bwplotka/release-2.53.5-gmp-gmpctl-vulnfix
Jun 1, 2026
Merged

google patch[deps]: fix release-2.53.5-gmp vulnerabilities#310
bwplotka merged 2 commits into
release-2.53.5-gmpfrom
bwplotka/release-2.53.5-gmp-gmpctl-vulnfix

Conversation

@bwplotka

@bwplotka bwplotka commented Jun 1, 2026

Copy link
Copy Markdown
Collaborator

Updating Go and image vulnerabilities using

./gmpctl.sh vulnfix

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go runtime version to 1.25.0, upgrades the builder and base images in Dockerfile.google, and bumps multiple dependency versions in go.mod and go.sum, including OpenTelemetry, gRPC, and Envoy. All review comments were filtered out as they commented on non-code changes (dependency version numbers), so there is no feedback to provide.

@bwplotka bwplotka force-pushed the bwplotka/release-2.53.5-gmp-gmpctl-vulnfix branch from 0ab5217 to 5a3d0b5 Compare June 1, 2026 12:58
Signed-off-by: bwplotka <bwplotka@gmail.com>
@bwplotka bwplotka force-pushed the bwplotka/release-2.53.5-gmp-gmpctl-vulnfix branch from 5a3d0b5 to 7230a4e Compare June 1, 2026 13:08
Signed-off-by: bwplotka <bwplotka@gmail.com>
@bwplotka bwplotka merged commit d7b75dd into release-2.53.5-gmp Jun 1, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants