Skip to content

Fix security#1781

Open
zhanggbj wants to merge 2 commits into
masterfrom
fix_security
Open

Fix security#1781
zhanggbj wants to merge 2 commits into
masterfrom
fix_security

Conversation

@zhanggbj

@zhanggbj zhanggbj commented Jun 9, 2026

Copy link
Copy Markdown
Collaborator

What this PR does / why we need it:

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #

Special notes for your reviewer:

Release note:

zhanggbj added 2 commits June 4, 2026 13:50
@zhanggbj
Remove unused SUPERVISOR_APISERVER_ENDPOINT_IP env var requirement
13b2d01 
Cleans up vsphereparavirtual configuration by removing the unused but
previously strictly validated SUPERVISOR_APISERVER_ENDPOINT_IP
environment variable. This variable went unused after API calls were
migrated to use the FQDN rather than endpoint IP.
@zhanggbj
Update Go version to 1.26.4 to fix standard library vulnerabilities
df7cfa9 
Bumps the Go version to 1.26.4 in the Makefile and Dockerfile to address
multiple security vulnerabilities in the Go standard library (including
GO-2026-5039, GO-2026-5038, GO-2026-5037, and others).
@k8s-ci-robot

k8s-ci-robot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: zhanggbj

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Jun 9, 2026
@k8s-ci-robot

k8s-ci-robot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

@zhanggbj: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-cloud-provider-vsphere-verify-fmt df7cfa9 link true /test pull-cloud-provider-vsphere-verify-fmt

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chenlin07 chenlin07 Awaiting requested review from chenlin07

@YanzhaoLi YanzhaoLi Awaiting requested review from YanzhaoLi

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@zhanggbj @k8s-ci-robot