OCPBUGS-84447,OCPBUGS-83965:Upgrade spdystream and grpc to fix CVEs by nrb · Pull Request #115 · openshift/cloud-provider-gcp

nrb · 2026-05-05T16:48:06Z

Summary by CodeRabbit

Chores
- Updated numerous third-party Go dependencies across modules, including gRPC, protobuf, OAuth2, and related libraries and tooling.
- These dependency bumps bring upstream fixes, performance improvements, and security patches while preserving existing behavior and not changing public APIs.

openshift-ci-robot · 2026-05-05T16:48:15Z

@nrb: This pull request references Jira Issue OCPBUGS-84447, which is invalid:

expected the vulnerability to target either version "5.0." or "openshift-5.0.", but it targets "4.22.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

This pull request references Jira Issue OCPBUGS-83965, which is invalid:

expected the vulnerability to target either version "5.0." or "openshift-5.0.", but it targets "4.22.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-05-05T16:48:21Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 718c62f7-3463-4c01-83ce-488a59d7ba11

📥 Commits

Reviewing files that changed from the base of the PR and between 8338e9d and 6fff9e3.

⛔ Files ignored due to path filters (280)

go.work is excluded by !**/*.work
metis/go.sum is excluded by !**/*.sum
test/e2e/go.sum is excluded by !**/*.sum
vendor/github.com/Masterminds/semver/v3/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/.golangci.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/CHANGELOG.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/LICENSE.txt is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/Makefile is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/SECURITY.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/collection.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/constraints.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/doc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/Masterminds/semver/v3/version.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/.gitattributes is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/.golangci.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/CODE-OF-CONDUCT.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/CONTRIBUTING.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/GOVERNANCE.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/MAINTAINERS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/Makefile is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/SECURITY.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/distribution-logo.svg is excluded by !**/*.svg, !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/helpers.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/normalize.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/reference.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/regexp.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/distribution/reference/sort.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/.editorconfig is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/.gitattributes is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/CHANGELOG.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/LICENSE.txt is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/Taskfile.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/crypto.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/date.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/defaults.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/dict.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/doc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/functions.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/list.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/network.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/numeric.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/reflect.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/regex.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/strings.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/go-task/slim-sprig/v3/url.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/AUTHORS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/CONTRIBUTORS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/encode.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/filter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/index.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/legacy_java_profile.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/legacy_profile.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/merge.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/profile.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/proto.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/pprof/profile/prune.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/AUTHORS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/client.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/compression.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/conn.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/doc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/join.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/json.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/mask.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/mask_safe.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/prepared.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/proxy.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/server.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/gorilla/websocket/util.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/.codecov.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/backup.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/callback.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/convert.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/doc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/error.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3-binding.h is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_context.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_func_crypt.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_go18.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_libsqlite3.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_load_extension.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_load_extension_omit.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_allow_uri_authority.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_app_armor.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_column_metadata.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_foreign_keys.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_fts5.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_icu.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_introspect.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_math_functions.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_os_trace.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_percentile.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_preupdate.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_preupdate_hook.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_preupdate_omit.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_secure_delete.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_secure_delete_fast.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_serialize.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_serialize_omit.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_stat4.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_unlock_notify.c is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_unlock_notify.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_userauth.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_userauth_omit.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_vacuum_full.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_vacuum_incr.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_opt_vtable.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_other.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_solaris.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_trace.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_type.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_usleep_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/sqlite3ext.h is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mattn/go-sqlite3/static_mock.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/CONTRIBUTING.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/MAINTAINERS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/NOTICE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/connection.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/handlers.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/priority.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/PATENTS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/dictionary.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/options.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/read.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/types.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/spdy/write.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/stream.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/moby/spdystream/utils.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mxk/go-flowrate/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mxk/go-flowrate/flowrate/flowrate.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mxk/go-flowrate/flowrate/io.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/mxk/go-flowrate/flowrate/util.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/.gitignore is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/CONTRIBUTING.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/Makefile is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/RELEASING.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/config/deprecated.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/core_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/decorator_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/deprecated_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/formatter/colorable_others.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/formatter/colorable_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/formatter/formatter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/automaxprocs.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroup.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroups.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cgroups2.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cpu_quota_linux.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/cpu_quota_unsupported.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/errors.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/mountpoint.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/runtime.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/automaxprocs/subsys.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/build/build_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/command/abort.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/command/command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/command/program.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/generators/boostrap_templates.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/generators/bootstrap_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/generators/generate_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/generators/generate_templates.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/generators/generators_common.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/compile.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/gocovmerge.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/profiles_and_reports.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/run.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/test_suite.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/utils.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/internal/verify_version.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/labels/labels_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/main.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/outline/ginkgo.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/outline/import.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/outline/outline.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/outline/outline_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/run/run_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/unfocus/unfocus_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/delta.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/delta_tracker.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/dependencies.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/package_hash.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/package_hashes.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/suite.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo/watch/watch_command.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo_cli_dependencies.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/ginkgo_t_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/around_node.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/counter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/failer.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/focus.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/global/init.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/group.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/interrupt_handler/interrupt_handler.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/interrupt_handler/sigquit_swallower_unix.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/interrupt_handler/sigquit_swallower_windows.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/node.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/ordering.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/output_interceptor.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/output_interceptor_unix.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/output_interceptor_wasm.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/output_interceptor_win.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/client_server.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/http_client.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/http_server.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/rpc_client.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/rpc_server.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/parallel_support/server_handler.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_report.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_report_bsd.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_report_unix.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_report_wasm.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_report_win.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/progress_reporter_manager.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/report_entry.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson_event_writer.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/reporters/gojson_reporter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/spec.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/spec_context.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/suite.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/testingtproxy/testing_t_proxy.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/tree.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/internal/writer.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/default_reporter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/deprecated_reporter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/gojson_report.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/json_report.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/junit_report.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/reporter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporters/teamcity_report.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/reporting_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/table_dsl.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/around_node.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/code_location.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/config.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/deprecated_types.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/deprecation_support.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/enum_support.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/errors.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/file_filter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/flags.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/label_filter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/report_entry.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/semver_filter.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/types.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/ginkgo/v2/types/version.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/onsi/gomega/gcustom/make_matcher.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/.mailmap is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/.pullapprove.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/.travis.yml is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/CONTRIBUTING.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/LICENSE is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/LICENSE.docs is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/MAINTAINERS is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/README.md is excluded by !**/vendor/**, !vendor/**
vendor/github.com/opencontainers/go-digest/algorithm.go is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (1)

test/e2e/go.mod

✅ Files skipped from review due to trivial changes (1)

test/e2e/go.mod

Walkthrough

This PR updates dependency versions in four go.mod files (root, metis, providers, test/e2e), advancing several direct and indirect modules including grpc, protobuf, genproto/googleapis, oauth2, and other transitive dependencies. No source code, API signatures, or exported declarations were changed.

Changes

Go Module Dependency Updates

Layer / File(s)	Summary
Dependency list edits `go.mod`, `metis/go.mod`, `providers/go.mod`, `test/e2e/go.mod`	Updated go.mod files' require/indirect blocks to new module versions; no other go.mod directives (module, go, toolchain, replace) were changed.
Direct dependency bumps `providers/go.mod` (`golang.org/x/oauth2`), `metis/go.mod` (`google.golang.org/grpc`, `google.golang.org/protobuf`)	Bumped `golang.org/x/oauth2` to v0.34.0 (where present). In `metis/go.mod` `google.golang.org/grpc` → v1.79.3 and `google.golang.org/protobuf` → v1.36.10.
Transitive / indirect bumps (core Google & related) `go.mod`, `providers/go.mod`, `test/e2e/go.mod`	Updated `google.golang.org/genproto/googleapis/api` and `.../rpc` to `v0.0.0-20251202230838-ff82c1b0f217`; advanced `google.golang.org/grpc` and `google.golang.org/protobuf` versions where present.
Other indirect upgrades `go.mod`, `test/e2e/go.mod`	Bumped `cel.dev/expr` → v0.25.1, `cloud.google.com/go/compute/metadata` → v0.9.0, `github.com/grpc-ecosystem/grpc-gateway/v2` → v2.27.1, `go.opentelemetry.io/proto/otlp` → v1.7.1, and `github.com/moby/spdystream` → v0.5.1.
Scope / non-functional `go.mod` files listed above	All edits are version bumps in go.mod files only; no source code, exported APIs, or behavioral changes in the repository were introduced.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

🚥 Pre-merge checks | ✅ 12

✅ Passed checks (12 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: upgrading spdystream and grpc dependencies to fix CVEs, which aligns with the go.mod updates across multiple modules shown in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR contains only dependency version updates in go.mod files. No Ginkgo test names are modified or added. The check for stable/deterministic test names is not applicable.
Test Structure And Quality	✅ Passed	PR contains only go.mod dependency updates (CVE fixes). No test code was modified, making test structure review not applicable.
Microshift Test Compatibility	✅ Passed	New e2e tests are GCP-specific with [cloud-provider-gcp-e2e] tags. They use GCECloud APIs and standard Kubernetes APIs only, without any unavailable MicroShift features or APIs.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only updates Go module dependencies in go.mod files. No new Ginkgo e2e tests added. SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	Not applicable. This PR contains only Go module dependency version updates across go.mod files. No deployment manifests, operator code, controllers, or scheduling constraints were added or modified.
Ote Binary Stdout Contract	✅ Passed	All main functions properly configure klog to stderr via logs.InitLogs(). No fmt.Print or unredirected stdout writes in process-level code. Test suite uses Ginkgo v2 correctly.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	New Ginkgo e2e tests use dynamic IP resolution via Kubernetes APIs, net.JoinHostPort for IPv6-safe host:port building, and have no hardcoded IPv4 addresses or external connectivity requirements.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

openshift-ci · 2026-05-05T16:48:55Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nrb for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

nrb · 2026-05-05T16:50:41Z

/jira refresh

openshift-ci-robot · 2026-05-05T16:50:50Z

@nrb: This pull request references Jira Issue OCPBUGS-84447, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (5.0.0) matches configured target version for branch (5.0.0)
bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

This pull request references Jira Issue OCPBUGS-83965, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (5.0.0) matches configured target version for branch (5.0.0)
bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-ci-robot · 2026-05-05T16:53:23Z

@nrb: This pull request references Jira Issue OCPBUGS-84447, which is valid.

3 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (5.0.0) matches configured target version for branch (5.0.0)
bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)

This pull request references Jira Issue OCPBUGS-83965, which is valid.

3 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target version (5.0.0) matches configured target version for branch (5.0.0)
bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)

Details

In response to this:

Summary by CodeRabbit

Chores

Updated dependencies across multiple modules to ensure compatibility and receive improvements from upstream packages.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

…: vendor Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

damdo · 2026-05-11T08:18:06Z

/retest

openshift-ci · 2026-05-11T10:45:36Z

@nrb: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

damdo · 2026-05-11T11:45:01Z

@nrb this one needs to be a drop UPSTREAM: 1059: chore(bump): update google.golang.org/grpc to v1.79.3: vendor

openshift-ci Bot requested review from damdo and theobarberbany May 5, 2026 16:48

openshift-ci-robot added jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. and removed jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels May 5, 2026

damdo added 2 commits May 5, 2026 13:27

UPSTREAM: 1059: chore(bump): update google.golang.org/grpc to v1.79.3

e6af27b

Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

UPSTREAM: 1059: chore(bump): update google.golang.org/grpc to v1.79.3…

75073da

…: vendor Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

nrb force-pushed the OCPBUGS-84447-83965 branch from 32e5aab to 8338e9d Compare May 5, 2026 17:36

nrb added 2 commits May 7, 2026 10:08

UPSTREAM: 1089: Update spdystream for CVE-2026-35469

15a4126

Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

UPSTREAM: <drop>: Vendor dependencies for spdy and grpc

6fff9e3

Signed-off-by: Nolan Brubaker <nolan@nbrubaker.com>

nrb force-pushed the OCPBUGS-84447-83965 branch from 32a3e89 to 6fff9e3 Compare May 7, 2026 14:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OCPBUGS-84447,OCPBUGS-83965:Upgrade spdystream and grpc to fix CVEs#115

OCPBUGS-84447,OCPBUGS-83965:Upgrade spdystream and grpc to fix CVEs#115
nrb wants to merge 4 commits into
openshift:mainfrom
nrb:OCPBUGS-84447-83965

nrb commented May 5, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

openshift-ci-robot commented May 5, 2026

Uh oh!

coderabbitai Bot commented May 5, 2026 •

edited

Loading

Uh oh!

openshift-ci Bot commented May 5, 2026

Uh oh!

nrb commented May 5, 2026

Uh oh!

openshift-ci-robot commented May 5, 2026

Uh oh!

openshift-ci-robot commented May 5, 2026

Summary by CodeRabbit

Uh oh!

damdo commented May 11, 2026

Uh oh!

openshift-ci Bot commented May 11, 2026

Uh oh!

damdo commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

nrb commented May 5, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

openshift-ci-robot commented May 5, 2026

Uh oh!

coderabbitai Bot commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Uh oh!

openshift-ci Bot commented May 5, 2026

Uh oh!

nrb commented May 5, 2026

Uh oh!

openshift-ci-robot commented May 5, 2026

Uh oh!

openshift-ci-robot commented May 5, 2026

Summary by CodeRabbit

Uh oh!

damdo commented May 11, 2026

Uh oh!

openshift-ci Bot commented May 11, 2026

Uh oh!

damdo commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

nrb commented May 5, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 5, 2026 •

edited

Loading