Skip to content

Commit 5c5167d

Browse files
xrstfxrstf
authored
Bump google.golang.org/grpc & go.opentelemetry.io/otel/sdk (kcp-dev#3972)
* bump google.golang.org/grpc [CVE-2026-33186] On-behalf-of: @SAP christoph.mewes@sap.com * bump go.opentelemetry.io/otel/sdk [CVE-2026-24051] On-behalf-of: @SAP christoph.mewes@sap.com * add chore label to PR template On-behalf-of: @SAP christoph.mewes@sap.com
1 parent 6c98d12 commit 5c5167d

5 files changed

Lines changed: 75 additions & 72 deletions

File tree

‎.github/pull_request_template.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ If this is your first time, please make sure to review CONTRIBUTING.MD.
1313
1414
Add one of the following kinds:
1515
/kind bug
16+
/kind chore
1617
/kind cleanup
1718
/kind documentation
1819
/kind feature

‎docs/generators/cli-doc/go.mod‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -79,14 +79,14 @@ require (
7979
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
8080
go.yaml.in/yaml/v2 v2.4.3 // indirect
8181
go.yaml.in/yaml/v3 v3.0.4 // indirect
82-
golang.org/x/net v0.48.0 // indirect
82+
golang.org/x/net v0.49.0 // indirect
8383
golang.org/x/oauth2 v0.34.0 // indirect
8484
golang.org/x/sync v0.19.0 // indirect
85-
golang.org/x/sys v0.39.0 // indirect
86-
golang.org/x/term v0.38.0 // indirect
87-
golang.org/x/text v0.32.0 // indirect
85+
golang.org/x/sys v0.40.0 // indirect
86+
golang.org/x/term v0.39.0 // indirect
87+
golang.org/x/text v0.33.0 // indirect
8888
golang.org/x/time v0.14.0 // indirect
89-
google.golang.org/protobuf v1.36.8 // indirect
89+
google.golang.org/protobuf v1.36.11 // indirect
9090
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
9191
gopkg.in/inf.v0 v0.9.1 // indirect
9292
gopkg.in/yaml.v3 v3.0.1 // indirect

‎docs/generators/cli-doc/go.sum‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY=
2-
cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw=
1+
cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4=
2+
cel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=
33
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 h1:L/gRVlceqvL25UVaW/CKtUDjefjrs0SPonmDGUVOYP0=
44
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
55
github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
@@ -163,10 +163,10 @@ github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
163163
github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
164164
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no=
165165
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e/go.mod h1:RbqR21r5mrJuqunuUZ/Dhy/avygyECGrLceyNeo4LiM=
166-
go.opentelemetry.io/otel v1.36.0 h1:UumtzIklRBY6cI/lllNZlALOF5nNIzJVb16APdvgTXg=
167-
go.opentelemetry.io/otel v1.36.0/go.mod h1:/TcFMXYjyRNh8khOAO9ybYkqaDBb/70aVwkNML4pP8E=
168-
go.opentelemetry.io/otel/trace v1.36.0 h1:ahxWNuqZjpdiFAyrIoQ4GIiAIhxAunQR6MUoKrsNd4w=
169-
go.opentelemetry.io/otel/trace v1.36.0/go.mod h1:gQ+OnDZzrybY4k4seLzPAWNwVBBVlF2szhehOBB/tGA=
166+
go.opentelemetry.io/otel v1.40.0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms=
167+
go.opentelemetry.io/otel v1.40.0/go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g=
168+
go.opentelemetry.io/otel/trace v1.40.0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw=
169+
go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA=
170170
go.uber.org/goleak v1.3.1-0.20251210191316-2b7fd8a0d244 h1:OdZ8e4E9yDUGiis9x2ta/Ec5yhMAKT6ZivRvakyxC7E=
171171
go.uber.org/goleak v1.3.1-0.20251210191316-2b7fd8a0d244/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
172172
go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
@@ -177,31 +177,31 @@ golang.org/x/exp v0.0.0-20251125195548-87e1e737ad39 h1:DHNhtq3sNNzrvduZZIiFyXWOL
177177
golang.org/x/exp v0.0.0-20251125195548-87e1e737ad39/go.mod h1:46edojNIoXTNOhySWIWdix628clX9ODXwPsQuG6hsK0=
178178
golang.org/x/mod v0.31.0 h1:HaW9xtz0+kOcWKwli0ZXy79Ix+UW/vOfmWI5QVd2tgI=
179179
golang.org/x/mod v0.31.0/go.mod h1:43JraMp9cGx1Rx3AqioxrbrhNsLl2l/iNAvuBkrezpg=
180-
golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
181-
golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
180+
golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
181+
golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
182182
golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
183183
golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
184184
golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
185185
golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
186186
golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
187187
golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
188188
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
189-
golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
190-
golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
191-
golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
192-
golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
193-
golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
194-
golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
189+
golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
190+
golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
191+
golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY=
192+
golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww=
193+
golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
194+
golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
195195
golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
196196
golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
197197
golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
198198
golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
199-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb h1:p31xT4yrYrSM/G4Sn2+TNUkVhFCbG9y8itM2S6Th950=
200-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb/go.mod h1:jbe3Bkdp+Dh2IrslsFCklNhweNTBgSYanP1UXhJDhKg=
201-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250528174236-200df99c418a h1:v2PbRU4K3llS09c7zodFpNePeamkAwG3mPrAery9VeE=
202-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250528174236-200df99c418a/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
203-
google.golang.org/protobuf v1.36.8 h1:xHScyCOEuuwZEc6UtSOvPbAT4zRh0xcNRYekJwfqyMc=
204-
google.golang.org/protobuf v1.36.8/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
199+
google.golang.org/genproto/googleapis/api v0.0.0-20260120221211-b8f7ae30c516 h1:vmC/ws+pLzWjj/gzApyoZuSVrDtF1aod4u/+bbj8hgM=
200+
google.golang.org/genproto/googleapis/api v0.0.0-20260120221211-b8f7ae30c516/go.mod h1:p3MLuOwURrGBRoEyFHBT3GjUwaCQVKeNqqWxlcISGdw=
201+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516 h1:sNrWoksmOyF5bvJUcnmbeAmQi8baNhqg5IWaI3llQqU=
202+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
203+
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
204+
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
205205
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
206206
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
207207
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=

‎go.mod‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ require (
3636
go.uber.org/goleak v1.3.1-0.20251210191316-2b7fd8a0d244
3737
go.uber.org/multierr v1.11.0
3838
go.uber.org/zap v1.27.0
39-
golang.org/x/sys v0.39.0
39+
golang.org/x/sys v0.40.0
4040
gopkg.in/square/go-jose.v2 v2.6.0
4141
k8s.io/api v0.35.1
4242
k8s.io/apiextensions-apiserver v0.35.1
@@ -97,7 +97,7 @@ replace (
9797
)
9898

9999
require (
100-
cel.dev/expr v0.24.0 // indirect
100+
cel.dev/expr v0.25.1 // indirect
101101
cyphar.com/go-pathrs v0.2.1 // indirect
102102
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
103103
github.com/MakeNowJust/heredoc v1.0.0 // indirect
@@ -173,32 +173,32 @@ require (
173173
go.etcd.io/etcd/pkg/v3 v3.6.5 // indirect
174174
go.etcd.io/etcd/server/v3 v3.6.5 // indirect
175175
go.etcd.io/raft/v3 v3.6.0 // indirect
176-
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
176+
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
177177
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 // indirect
178178
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
179-
go.opentelemetry.io/otel v1.36.0 // indirect
179+
go.opentelemetry.io/otel v1.40.0 // indirect
180180
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0 // indirect
181181
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0 // indirect
182-
go.opentelemetry.io/otel/metric v1.36.0 // indirect
183-
go.opentelemetry.io/otel/sdk v1.36.0 // indirect
184-
go.opentelemetry.io/otel/trace v1.36.0 // indirect
182+
go.opentelemetry.io/otel/metric v1.40.0 // indirect
183+
go.opentelemetry.io/otel/sdk v1.40.0 // indirect
184+
go.opentelemetry.io/otel/trace v1.40.0 // indirect
185185
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
186186
go.yaml.in/yaml/v2 v2.4.3 // indirect
187187
go.yaml.in/yaml/v3 v3.0.4 // indirect
188-
golang.org/x/crypto v0.46.0 // indirect
188+
golang.org/x/crypto v0.47.0 // indirect
189189
golang.org/x/exp v0.0.0-20251125195548-87e1e737ad39 // indirect
190190
golang.org/x/mod v0.31.0 // indirect
191-
golang.org/x/net v0.48.0 // indirect
191+
golang.org/x/net v0.49.0 // indirect
192192
golang.org/x/oauth2 v0.34.0 // indirect
193193
golang.org/x/sync v0.19.0 // indirect
194-
golang.org/x/term v0.38.0 // indirect
195-
golang.org/x/text v0.32.0 // indirect
194+
golang.org/x/term v0.39.0 // indirect
195+
golang.org/x/text v0.33.0 // indirect
196196
golang.org/x/time v0.14.0 // indirect
197197
golang.org/x/tools v0.40.0 // indirect
198-
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
199-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250528174236-200df99c418a // indirect
200-
google.golang.org/grpc v1.72.2 // indirect
201-
google.golang.org/protobuf v1.36.8 // indirect
198+
google.golang.org/genproto/googleapis/api v0.0.0-20260120221211-b8f7ae30c516 // indirect
199+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516 // indirect
200+
google.golang.org/grpc v1.80.0 // indirect
201+
google.golang.org/protobuf v1.36.11 // indirect
202202
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
203203
gopkg.in/go-jose/go-jose.v2 v2.6.3 // indirect
204204
gopkg.in/inf.v0 v0.9.1 // indirect

0 commit comments

Comments
 (0)