Skip to content

fix(go): build with Go 1.26.10 and bump go-chi/chi to v5.4.0 - #227

Merged
kycheng merged 1 commit into
AlaudaDevops:alauda-v0.68.2from
kycheng:fix/DEVOPS-44846-go-1.26.10
Oct 26, 2026
Merged

kycheng merged 1 commit into
AlaudaDevops:alauda-v0.68.2from
kycheng:fix/DEVOPS-44846-go-1.26.10

Conversation

@kycheng

@kycheng kycheng commented Oct 26, 2026

Copy link
Copy Markdown
Collaborator

Remediates image scan findings from the harbor all-in-one pipeline (2026-10-26 vulnerability DB):

  • Go stdlib CVE-2026-111943 (crypto/x509), fixed in Go 1.26.10
  • go-chi/chi CVE-2026-114437, fixed in v5.4.0

After merge a new alauda release is cut and backfilled into harbor-helm.

🤖 Generated with Claude Code

Fixes Go stdlib CVE-2026-111943 (crypto/x509) and CVE-2026-114437 (chi).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@kycheng kycheng changed the title fix(security): build with Go 1.26.10 and bump go-chi/chi to v5.4.0 fix(go): build with Go 1.26.10 and bump go-chi/chi to v5.4.0 Oct 26, 2026
@kycheng
kycheng merged commit ead6cdf into AlaudaDevops:alauda-v0.68.2 Oct 26, 2026
6 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants