Repository navigation
Update from update/networkservicemesh/sdk - #142
Merged
Merged
Conversation
…k@main PR link: networkservicemesh/sdk#1763 Commit: 7da7564 Author: Network Service Mesh Bot Date: 2026-10-22 07:55:15 -0500 Message: - Update from update/networkservicemesh/api (#1763) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: c979690 Author: Botond Szirtes Date: 2026-10-22 13:38:00 +0200 Message: - Uplift grpc, x/net, x/text, x/sys to resolve CVEs (#205) - google.golang.org/grpc v1.82.1 -> v1.83.2 (CVE-2026-84303, CVE-2026-84304, CVE-2026-84445) - golang.org/x/net v0.56.0 -> v0.60.0 (CVE-2026-78659, CVE-2026-97032) - golang.org/x/text v0.39.0 -> v0.42.0 (CVE-2026-56851, v0.42.0 instead of v0.41.0 as it is the minimum required by x/net v0.60.0) - golang.org/x/sys v0.46.0 -> v0.48.0 (pulled up by x/net v0.60.0 minimum requirement) x/net v0.60.0, x/text v0.42.0 and x/sys v0.48.0 all declare go 1.26.0, so the go directive and the CI Go toolchain pins were bumped accordingly. Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Fix non-constant format string in traceLogger Infof and Warnf traceLogger.format() already applies fmt.Sprintf, so its result is final log text. Passing it on to Logger.Infof/Warnf as a format string made fmt parse it a second time, corrupting any message whose data contains a percent sign (e.g. "label=50% done" became "label=50%!d(MISSING)one"). Delegate to the non-format Info/Warn variants instead, matching what Errorf, Fatalf, Debugf and Tracef already do. This is also reported by vet's printf analyzer once the module's go directive reaches 1.26.0, which failed the golangci-lint job and, because go test runs printf as part of its default vet subset, the build-and-test and code-cov jobs as well. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> * Add 2026 copyright header to logruslogger The goheader linter derives the required year from the file's git modification year, so touching the file in 2026 made the existing 2021-2022 / 2023-2024 holder lines insufficient. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> * Bump code-cov Go toolchain pin to 1.26.0 The go directive moved to 1.26.0 when x/net v0.60.0 was pulled in, but the code-cov job still pinned setup-go to 1.25.0. GOTOOLCHAIN then downloaded a second toolchain, and the job failed with: compile: version "go1.26.0" does not match go tool version "go1.25.0" Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
force-pushed
the
update/networkservicemesh/sdk
branch
from
October 22, 2026 13:32
18b3b09 to
fde79f0
Compare
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Oct 22, 2026
…d-csi-driver@main (#13872) PR link: networkservicemesh/cmd-csi-driver#142 Commit: 0e81226 Author: Network Service Mesh Bot Date: 2026-10-22 08:44:29 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#142) Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update go.mod and go.sum to latest version from networkservicemesh/sdk@main PR link: networkservicemesh/sdk#1763
Commit: 18b3b09
Author: NSMBot
Date: Thu Oct 22 12:55:51 2026 +0000