fix(security): remediate CVE vulnerabilities - #49
ulucinar merged 2 commits into
Conversation
Sorry, something went wrong.
- Update Go version to 1.25.12 (fixes GO-2026-5856, GO-2026-4970) - Update golang.org/x/text to v0.39.0 (fixes GO-2026-5970) - Update golang.org/x/net to v0.56.0 (fixes GO-2026-5942) - Update google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf) Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Build Failure AnalysisCheck: push SummaryThe composition test (up test run tests/*) is failing because the expected output files have outdated values for resource fields that the function now correctly populates. Root CauseThe test expected output files in the tests/ directory have empty or missing values for fields that are now being generated by the function:
When the function behavior changed or Kubernetes defaults evolved, the test expectations weren't updated to match. Error Detailsup: error: 1 / 1 tests failed FAIL: function-claude apps/v1/Deployment/example-db-5add7b0f9f83: * metadata.ownerReferences[0].uid: Invalid value: "ae088a8d-c2e5-522e-ae5c-d068332dc05d": Expected value: "" * metadata.name: Expected empty, got "example-db-5add7b0f9f83" * spec.template.spec.containers[0].name: Expected empty, got "app" * spec.template.spec.containers[0].ports[0].protocol: Expected empty, got "TCP" v1/Service/example-db-53b064d3c9b0: * metadata.ownerReferences[0].uid: Invalid value: "ae088a8d-c2e5-522e-ae5c-d068332dc05d": Expected value: "" * metadata.name: Expected empty, got "example-db-53b064d3c9b0" RecommendationAction Required: Update the test expected output files to match the actual function behavior. The expected output files need to include the fields shown in the actual output. This is a straightforward fix - update the YAML files in tests/*/expected/ to include:
After updating, run up test run tests/* locally to verify the tests pass, then commit and push the changes. This analysis was generated by the build-failure-analyze skill. |
Sorry, something went wrong.
- Update Deployment test expectations: add name, uid, container name, port protocol - Update Service test expectations: add name, uid Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
| kind: "App" | ||
| name: "example-db" | ||
| uid: "" | ||
| uid: "ae088a8d-c2e5-522e-ae5c-d068332dc05d" |
There was a problem hiding this comment.
These are deterministic...
Sorry, something went wrong.
Summary
This PR fixes CVE vulnerabilities identified by security scanning.
Vulnerabilities Fixed
Changes Made
References
Verification