Skip to content

Backport security and toolchain updates for v0.24.1 patch release#320

Merged
eguzki merged 2 commits into
release-0.24from
backport-v0.24.1-patches
Jun 23, 2026
Merged

Backport security and toolchain updates for v0.24.1 patch release#320
eguzki merged 2 commits into
release-0.24from
backport-v0.24.1-patches

Conversation

@guicassolato

Copy link
Copy Markdown
Collaborator

Summary

Cherry-picked security fixes and toolchain updates for the v0.24.1 patch release.

Changes

Semver Classification

All changes are patch-safe:

PR Change Classification Reason
#304 Go 1.25.8 → 1.25.9 SAFE Toolchain patch version update
#315 golang.org/x/net v0.52.0 → v0.55.0 SAFE Indirect dependency, security fix for idna package

Verification

  • ✓ PR Upgrade Go to 1.25.9 #304: Go toolchain version bump only, no code changes
  • ✓ PR Upgrade golang.org/x/net to v0.55.0 #315: All golang.org/x packages are indirect dependencies (// indirect in go.mod)
  • ✓ No direct imports of golang.org/x packages in the codebase
  • ✓ Changes are dependency updates only (go.mod, go.sum)
  • ✓ No inter-PR dependencies detected
  • ✓ Cherry-picks applied cleanly in chronological order

Related


Generated via /kdt:patch-release workflow

@coderabbitai

coderabbitai Bot commented Jun 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 3698c330-4b48-42c7-9e3f-d2f30d2aab79

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport-v0.24.1-patches

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@guicassolato guicassolato self-assigned this Jun 19, 2026
@guicassolato guicassolato requested a review from a team June 19, 2026 13:03
@guicassolato guicassolato moved this to Ready For Review in Kuadrant Jun 19, 2026
@guicassolato guicassolato moved this from Ready For Review to In Progress in Kuadrant Jun 19, 2026
@guicassolato guicassolato removed the request for review from a team June 19, 2026 13:32
thomasmaas and others added 2 commits June 23, 2026 17:55
Signed-off-by: Thomas Maas <tmaas@redhat.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Thomas Maas <thomas@webtypes.com>
Bumps golang.org/x/net from v0.52.0 to v0.55.0.

Signed-off-by: Thomas Maas <thomas@webtypes.com>
@eguzki eguzki force-pushed the backport-v0.24.1-patches branch from a02260b to 68bc8f3 Compare June 23, 2026 15:55
@eguzki eguzki merged commit 746b2c1 into release-0.24 Jun 23, 2026
10 checks passed
@eguzki eguzki deleted the backport-v0.24.1-patches branch June 23, 2026 16:29
@github-project-automation github-project-automation Bot moved this from In Progress to Done in Kuadrant Jun 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

4 participants