[Snyk] Security upgrade golang from 1.25.2-alpine3.22 to 1.26.1-alpine3.22#6560
[Snyk] Security upgrade golang from 1.25.2-alpine3.22 to 1.26.1-alpine3.22#6560caniszczyk wants to merge 1 commit into
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE322-OPENSSL-15121226 - https://snyk.io/vuln/SNYK-ALPINE322-OPENSSL-15121226 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091698 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091698 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091701
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #6560 +/- ##
==========================================
+ Coverage 28.82% 28.83% +0.01%
==========================================
Files 563 563
Lines 60035 60035
==========================================
+ Hits 17303 17313 +10
+ Misses 41410 41401 -9
+ Partials 1322 1321 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
✅ This PR has been automatically closedThe security issues addressed by this pull request are no longer present in the latest project scan. All vulnerabilities this PR was created to fix have been resolved through other means (e.g., dependency updates, direct fixes, or changes in vulnerability data). Resolved Issues
What should I do?No action is required. If you believe this PR was closed in error, you can reopen it and contact Snyk support. This action was performed automatically by Snyk. |
3 participants
Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
tool/actions-gh-release/DockerfileWe recommend upgrading to
golang:1.26.1-alpine3.22, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Vulnerabilities that will be fixed with an upgrade:
SNYK-ALPINE322-OPENSSL-15121226
SNYK-ALPINE322-OPENSSL-15121226
SNYK-ALPINE322-BUSYBOX-14091698
SNYK-ALPINE322-BUSYBOX-14091698
SNYK-ALPINE322-BUSYBOX-14091701
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.