Skip to content

fix: nightly security dependency updates - #4387

Open
github-actions[bot] wants to merge 1 commit into
masterfrom
security-nightly-updates
Open

github-actions[bot] wants to merge 1 commit into
masterfrom
security-nightly-updates

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Security Update

This is an automated PR triggered by the nightly OSV-Scanner security scan.

The following dependencies were updated to resolve known vulnerabilities:

Package & Version Advisory Link
golang.org/x/crypto@v0.58.1-0.20261009181718-2f1f834330b2 GO-2026-5932

Verification: Updated via go get <pkg>@v<version> and go mod tidy.

Note: This PR was created with GITHUB_TOKEN, which does not trigger pull_request workflows.
CI checks will not run automatically. Push an empty commit (git commit --allow-empty -m "trigger CI")
to kick off CI before merging.

TODO: Migrate to a GitHub App token via actions/create-github-app-token to trigger CI automatically.

@google-oss-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign terrytangyuan for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions
github-actions Bot force-pushed the security-nightly-updates branch 4 times, most recently from 37dfcd9 to 32821a5 Compare November 7, 2026 02:12
@github-actions
github-actions Bot force-pushed the security-nightly-updates branch from 32821a5 to 58b60cd Compare November 12, 2026 02:12

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: Needs Triage

Development

Successfully merging this pull request may close these issues.

0 participants