mirrors/velero
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/velero.git synced 2026-09-28 10:45:44 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
6,116 Commits 101 Branches 190 Tags
c8ca0670d229b2d54ec937f182cfcd6f0fcc57cc
Commit Graph
11 Commits
Author SHA1 Message Date
Xun Jiang/Bruce JiangandGitHub f90a37302e Merge pull request #9884 from blackpiglet/jxun/1.18/bump_dependency_packages 
[1.18] Remove several deperacated or inactively maintained packages
 2026-06-10 13:47:07 +08:00
Xun Jiang 780f5518a5 Fix CVEs for v1.18.1 
* Bump golang to 1.25.9-trixie
* Bump jammy to 0.2.126
* Bump google.golang.org/grpc and google.golang.org/api in restic to 1.79.3 to fix CVE-2026-33186
* Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to 1.7.8 to fix GHSA-xmrv-pmrh-hhx2
* Bump github.com/aws/aws-sdk-go-v2/service/s3 to 1.97.3 to fix GHSA-xmrv-pmrh-hhx2
* Bump github.com/moby/spdystream to 0.5.1 to fix CVE-2026-35469
* Bump go.opentelemetry.io/otel/sdk to 1.43.0 to fix CVE-2026-39883

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2026-04-24 16:44:28 +08:00
Xun Jiang f824c3ca3b Bump golang.org/x/crypto to v0.45.0 to fix CVEs. 
* CVE-2025-47914
* CVE-2025-58181

Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2026-02-03 17:23:01 +08:00
iiriix d12b700b90 chore: bump golang.org/x/oauth2 to fix restic CVE-2025-22868 
Signed-off-by: Iiriix <1596129+iiriix@users.noreply.github.com>
 2025-06-12 09:38:51 -07:00
Xun Jiang/Bruce JiangandGitHub 83a0badf96 Bump golang.org/x/net to v0.38.0 to fix CVE. (#8896)
Run the E2E test on kind / build (push) Failing after 6m39s
Details
Run the E2E test on kind / setup-test-matrix (push) Successful in 3s
Details
Run the E2E test on kind / run-e2e-test (push) Has been skipped
Details
Main CI / Build (push) Failing after 36s
Details
Close stale issues and PRs / stale (push) Successful in 10s
Details
Trivy Nightly Scan / Trivy nightly scan (velero, main) (push) Failing after 1m11s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-aws, main) (push) Failing after 49s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-gcp, main) (push) Failing after 49s
Details
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-microsoft-azure, main) (push) Failing after 53s
Details 
Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2025-04-30 12:35:02 -04:00
Xun Jiang 96760885dc Bump the golang.org/x/net to v0.36.0 to fix Restic CVE. 
Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2025-03-27 11:02:33 +08:00
Xun Jiang e68dca0112 Bump Restic go.mod to fix CVEs. 
Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
 2024-12-24 11:19:02 +08:00
Xun Jiang a01ef11c92 Fix CVEs reported in GitHub security. 
Signed-off-by: Xun Jiang <blackpigletbruce@gmail.com>
 2024-04-22 10:05:10 +08:00
Xun Jiang 3dc202d30a Bump Golang library versions for v1.13 Restic to fix CVEs. 
Bump golang.org/x/crypto version to v0.17.0.
Bump google.golang.org/grpc version to v1.56.3.

Signed-off-by: Xun Jiang <jxun@vmware.com>
 2023-12-20 10:31:48 +08:00
Xun Jiang a726329e82 Bump golang version. 
Bump golang version to v1.21.
Bump golang.org/x/net version to v0.17.0 in Velero and Restic.

Signed-off-by: Xun Jiang <jxun@vmware.com>
 2023-10-13 16:30:23 +08:00
Xun Jiang fc692c49e6 Update Golang version to v1.19 for branch main. 
Signed-off-by: Xun Jiang <blackpiglet@gmail.com>
 2023-04-04 12:00:19 +08:00