Merge branch 'master' into feat/rewrite-deb-in-go

Author: jess-lowe

.github/workflows/generate-protos.yml

@@ -48,7 +48,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: '1.26.0'
+          go-version: '1.26.1'
 
       - name: Install protoc
         run: |

.github/workflows/lint.yaml

@@ -52,7 +52,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
-          go-version: '>=1.25.7'
+          go-version: '>=1.26.1'
       - name: Set up terraform
         uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 # v4.0.0
       - name: Run pylint and yapf, go vet

Makefile

@@ -52,7 +52,7 @@ update-api-snapshots:
 	cd gcp/api && UPDATE_SNAPS=true ./run_tests_e2e.sh $(HOME)/.config/gcloud/application_default_credentials.json
 
 lint:
-	GOTOOLCHAIN=go1.26.0 $(run-cmd) tools/lint_and_format.sh
+	GOTOOLCHAIN=go1.26.1 $(run-cmd) tools/lint_and_format.sh
 
 build-osv-protos:
 	cd osv && $(run-cmd) python -m grpc_tools.protoc --python_out=. --mypy_out=. --proto_path=. --proto_path=osv-schema/proto vulnerability.proto importfinding.proto

bindings/go/go.mod

@@ -1,6 +1,6 @@
 module osv.dev/bindings/go
 
-go 1.26.0
+go 1.26.1
 
 require (
 	github.com/google/go-cmp v0.7.0

deployment/clouddeploy/gke-indexer/base/indexer-controller.yaml

@@ -44,8 +44,6 @@ spec:
             volumeMounts:
               - mountPath: "/tmp"
                 name: "ssd"
-            securityContext:
-              privileged: true
             resources:
               requests:
                 cpu: 5

deployment/clouddeploy/gke-indexer/base/indexer-worker.yaml

@@ -46,8 +46,6 @@ spec:
         volumeMounts:
         - mountPath: "/tmp"
           name: "ssd"
-        securityContext:
-          privileged: true
         resources:
           requests:
             cpu: 1

deployment/clouddeploy/gke-workers/base/alpine-cve-convert.yaml

@@ -20,8 +20,6 @@ spec:
           - name: alpine-cve-convert
             image: alpine-cve-convert
             imagePullPolicy: Always
-            securityContext:
-              privileged: true
             resources:
               requests:
                 cpu: "2"

deployment/clouddeploy/gke-workers/base/combine-to-osv.yaml

@@ -21,8 +21,6 @@ spec:
           - name: combine-to-osv
             image: combine-to-osv
             imagePullPolicy: Always
-            securityContext:
-              privileged: true
             resources:
               requests:
                 cpu: "30"

deployment/clouddeploy/gke-workers/base/cpe-repo-gen.yaml

@@ -16,8 +16,6 @@ spec:
           - name: cpe-repo-gen
             image: cpe-repo-gen
             imagePullPolicy: Always
-            securityContext:
-              privileged: true
             resources:
               requests:
                 cpu: "1"

deployment/clouddeploy/gke-workers/base/cve5-to-osv.yaml

@@ -17,8 +17,6 @@ spec:
           - name: cve5-to-osv
             image: cve5-to-osv
             imagePullPolicy: Always
-            securityContext:
-              privileged: true
             resources:
               requests:
                 cpu: "8"