chore: fix security vulnerabilities for 1.0#10179
Open
ldming wants to merge 7 commits into
Open
Conversation
Collaborator
|
Auto Cherry-pick Instructions |
- Dockerfile: golang:1.24.11-alpine → golang:1.25-alpine - go.mod: upgrade google.golang.org/grpc v1.74.2 → v1.79.3 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
ldming
force-pushed
the
support/fix-security-vulns-20260426
branch
from
85b41be to
d4d6950
Compare
- Dockerfile: golang:1.24.11-alpine → golang:1.25-alpine - go.mod: upgrade google.golang.org/grpc v1.74.2 → v1.79.3 - Makefile: controller-gen v0.14.0 → v0.16.5 (Go 1.25 compatible) - Regenerate CRDs and RBAC with controller-gen v0.16.5 - Fix dataprotection test to provide required compDefs field Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
github-actions
Bot
added
size/XXL
ldming
changed the title
- golangci-lint v1.64.8 is built with Go 1.24, incompatible with Go 1.25 - Migrate .golangci.yaml to v2 format Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
…taticcheck to 2026.1 for Go 1.25 compatibility
…roller-gen v0.16.5
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## release-1.0 #10179 +/- ##
===============================================
- Coverage 53.78% 53.73% -0.06%
===============================================
Files 493 493
Lines 54911 54911
===============================================
- Hits 29534 29505 -29
- Misses 22437 22456 +19
- Partials 2940 2950 +10
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
ldming
changed the title
ldming
requested review from
a team,
JashBook,
ahjing99 and
wangyelei
as code owners
|
This PR is stale because it has been open 45 days with no activity. Remove stale label or comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Upgrade Go builder, base image, and toolchain to fix CRITICAL/HIGH vulnerabilities detected by trivy. This PR also migrates golangci-lint to v2 and upgrades controller-gen to maintain compatibility with Go 1.25.
Changes
Builder & Base Image
golang:1.24.11-alpine→golang:1.25-alpinego 1.24→go 1.25.0google.golang.org/grpcand other dependenciesCI/CD
GO_VERSIONto1.25in all workflow filesToolchain (Go 1.25 Compatibility)
golangci-lintv1.64.8 → v2.11.4controller-genv0.14.0 → v0.16.5staticcheckv0.6.1 → 2026.1.golangci.yaml: migrate from v1 format to v2 format, removestaticcheckfrom golangci-lint (covered by standalone staticcheck)Code Fixes
apis/apps/v1alpha1/type.go: fix deprecated comment format for gocriticapis/workloads/v1alpha1/instanceset_types.go: fix deprecated comment format for gocriticapis/operations/v1alpha1/opsrequest_types.go: remove incorrect+kubebuilder:validation:RequiredfromFromBackup.Namespace(optional field)pkg/kbagent/service/task_new_replica.go: fix IPv6 address format (fmt.Sprintf→net.JoinHostPort)controllers/dataprotection/backuppolicytemplate_controller_test.go: add missing requiredcompDefsfieldGenerated Files
docs/developer_docs/api-reference/cluster.md)config/rbac/role.yamland Helm CRDsScan Context
Version scanned: apecloud/kubeblocks:1.0.3-beta.5