Bump Golang and dependencies versions. (#10489)
Run the E2E test on kind / setup-test-matrix (push) Failing after 4s
e2e-test-kind.yaml / extract (push) Successful in 16s
Run the E2E test on kind / get-go-version (push) Successful in 17s
push.yml / extract (push) Successful in 11s
Main CI / get-go-version (push) Successful in 12s
Run the E2E test on kind / build (push) Failing after 30s
Run the E2E test on kind / run-e2e-test (push) Skipped
Main CI / Build (push) Failing after 33s

Bump Golang to latest 1.26: v1.26.8
Bump google.golang.org/grpc to v1.83.1 to fix CVE-2026-84304 for both Velero and Restic
Bump golang.org/x/crypto to v0.56.0 to fix CVE-2026-56854, CVE-2026-56855, and CVE-2026-78662 for both Velero and Restic.
Modify the restic build script to allow verification on local dev environment.
Ignore spell check for the restic patch file.

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
This commit is contained in:
Xun Jiang/Bruce Jiang
2026-09-07 13:21:58 +08:00
committed by GitHub
parent 0fe080edc6
commit 31acdc02d8
8 changed files with 112 additions and 107 deletions
+1 -1
View File
@@ -14,7 +14,7 @@ jobs:
uses: codespell-project/actions-codespell@master
with:
# ignore the config/.../crd.go file as it's generated binary data that is edited elsewhere.
skip: .git,*.png,*.jpg,*.woff,*.ttf,*.gif,*.ico,./config/crd/v1beta1/crds/crds.go,./config/crd/v1/crds/crds.go,./config/crd/v2alpha1/crds/crds.go,./go.sum,./LICENSE
skip: .git,*.png,*.jpg,*.woff,*.ttf,*.gif,*.ico,./config/crd/v1beta1/crds/crds.go,./config/crd/v1/crds/crds.go,./config/crd/v2alpha1/crds/crds.go,./go.sum,./LICENSE,./hack/fix_restic_cve.txt
ignore_words_list: iam,aks,ist,bridget,ue,shouldnot,atleast,notin,sme,optin,sie
check_filenames: true
check_hidden: true