Skip to content

[PMK-6907][CVE-2025-68121] Upgrade go from 1.23 to 1.26 - #329

Merged
snslk merged 4 commits into
masterfrom
private/snh/fix_code_scan
Jun 30, 2026
Merged

[PMK-6907][CVE-2025-68121] Upgrade go from 1.23 to 1.26 #329
snslk merged 4 commits into
masterfrom
private/snh/fix_code_scan

Conversation

@snslk

@snslk snslk commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Fix Security Vulnerability

https://github.com/platform9/luigi/security/code-scanning/106

Fix

The crypto/tls fix is part of the Go stdlib, so upgrading the Go toolchain itself (not a dependency) is the correct remediation.
Go version upgrade from 1.23 to 1.26 .

Testing

Manual

➜  ~ git:(main) ✗ k get pods -n luigi-system                                                                            
NAME                                        READY   STATUS    RESTARTS   AGE
cert-manager-775656cd8c-dpjkx               1/1     Running   0          3h12m
cert-manager-cainjector-7b4fc5b89-5vdpf     1/1     Running   0          3h12m
cert-manager-webhook-6b4c7f6888-4gvld       1/1     Running   0          3h12m
luigi-controller-manager-79ddbdc98d-zszz5   2/2     Running   0          2m46s
➜  ~ git:(main) ✗ 
➜  ~ git:(main) ✗ k get pods -n luigi-system luigi-controller-manager-79ddbdc98d-zszz5  -oyaml | grep image | grep luigi
    image: quay.io/platform9/luigi-plugins:private-snh-fix_code_scan-pmk-4767864
    image: quay.io/platform9/luigi-plugins:private-snh-fix_code_scan-pmk-4767864
    imageID: quay.io/platform9/luigi-plugins@sha256:9f3447e7000486d6a6153ec0cb35490357f1c6990dac7f414cc9dd148dc231e6

@windsurf-bot windsurf-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 🤙

💡 To request another review, post a new comment with "/windsurf-review".

@snslk snslk changed the title [CVE-2025-68121] Upgrade go from 1.23 to 1.26 [PMK-6907][CVE-2025-68121] Upgrade go from 1.23 to 1.26 Jun 23, 2026
@snslk
snslk merged commit cf96b28 into master Jun 30, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants