Skip to content

Conversation

@theadarshsaxena
Copy link

@theadarshsaxena theadarshsaxena commented Jul 1, 2025

Creating PR as per suggestion in comment -> #264 (comment) by @blackpiglet

This PR is not a hard requirement for now, merge it if required else we can close this later.
CVEs fixed by this Go upgrade:

  1. bin/cp-plugin (gobinary)
  2. plugins/velero-plugin-for-aws (gobinary)

@sseago
Copy link
Collaborator

sseago commented Jul 1, 2025

Edited description to include CVEs fixed:
CVEs fixed by this Go upgrade:

  1. bin/cp-plugin (gobinary)
  2. plugins/velero-plugin-for-aws (gobinary)

Copy link
Contributor

@blackpiglet blackpiglet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please hold on to merge this PR.
Main branch doesn't need to pin the Golang version.

Sorry, @theadarshsaxena. I totally forgot that.
Sorry again for the misleading.

@theadarshsaxena
Copy link
Author

no problem, I appreciate your intent to help 🙇‍♂️
we can close this PR if not required then?

@kaovilai
Copy link
Collaborator

kaovilai commented Jul 2, 2025

The go mod is already pinned, perhaps only keep go.mod change but delete the Dockerfile changes?

@kaovilai
Copy link
Collaborator

kaovilai commented Jul 2, 2025

I see https://github.com/vmware-tanzu/velero/pull/9059/files is removing the go.mod toolchain line, so perhaps yeah. just close PR.

@blackpiglet blackpiglet closed this Jul 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants