Skip to content

[1.18] Bump golang.net/x/net to 0.51.0 to fix CVE-2026-27141#9774

Merged
Lyndon-Li merged 1 commit intovelero-io:release-1.18from
blackpiglet:xj014661/1.18/CVE-2026-27141
May 6, 2026
Merged

[1.18] Bump golang.net/x/net to 0.51.0 to fix CVE-2026-27141#9774
Lyndon-Li merged 1 commit intovelero-io:release-1.18from
blackpiglet:xj014661/1.18/CVE-2026-27141

Conversation

@blackpiglet
Copy link
Copy Markdown
Contributor

@blackpiglet blackpiglet commented May 6, 2026

Bump paketobuildpacks/run-jammy-tiny to latest tag: 0.2.129

Thank you for contributing to Velero!

Please add a summary of your change

Does your change fix a particular issue?

Fixes #(issue)

Please indicate you've done the following:

@blackpiglet blackpiglet added the kind/changelog-not-required PR does not require a user changelog. Often for docs, website, or build changes label May 6, 2026
@github-actions github-actions Bot requested review from kaovilai and ywk253100 May 6, 2026 06:46
@github-actions github-actions Bot added the Dependencies Pull requests that update a dependency file label May 6, 2026
Lyndon-Li
Lyndon-Li previously approved these changes May 6, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Bump paketobuildpacks/run-jammy-tiny to latest tag: 0.2.129
Update the minio Dockerfile directory.

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
@blackpiglet blackpiglet force-pushed the xj014661/1.18/CVE-2026-27141 branch from b96eb4c to d245d3b Compare May 6, 2026 06:58
@blackpiglet blackpiglet changed the title Bump golang.net/x/net to 0.51.0 to fix CVE-2026-27141 [1.18] Bump golang.net/x/net to 0.51.0 to fix CVE-2026-27141 May 6, 2026
@Lyndon-Li Lyndon-Li merged commit 383c796 into velero-io:release-1.18 May 6, 2026
58 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file kind/changelog-not-required PR does not require a user changelog. Often for docs, website, or build changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants