Skip to content

fix: CVE-2025-61729 & CVE-2025-61726 - upgrade go version to >1.25.5#2750

Open
infernus01 wants to merge 1 commit intotektoncd:release-v0.42.1from
infernus01:CVE-2025-61729-v0.42.1
Open

fix: CVE-2025-61729 & CVE-2025-61726 - upgrade go version to >1.25.5#2750
infernus01 wants to merge 1 commit intotektoncd:release-v0.42.1from
infernus01:CVE-2025-61729-v0.42.1

Conversation

@infernus01
Copy link
Member

Changes

Scope of this fix is to address CVE-2025-61729 & CVE-2025-61726 by upgrading go version above 1.25.5.

/kind bug

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

  • Includes tests (if functionality changed/added)
  • Run the code checkers with make check
  • Regenerate the manpages, docs and go formatting with make generated
  • Commit messages follow commit message best practices

See the contribution guide
for more details.

Release Notes

@tekton-robot tekton-robot added kind/bug Categorizes issue or PR as related to a bug. release-note Denotes a PR that will be considered when it comes time to generate release notes. labels Feb 26, 2026
@tekton-robot tekton-robot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Feb 26, 2026
@infernus01 infernus01 force-pushed the CVE-2025-61729-v0.42.1 branch from 35e7ba3 to 50140fe Compare February 26, 2026 08:42
@tekton-robot tekton-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Feb 26, 2026
@infernus01 infernus01 force-pushed the CVE-2025-61729-v0.42.1 branch 2 times, most recently from 4e19b10 to b7c1097 Compare March 5, 2026 07:18
@tekton-robot tekton-robot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Mar 5, 2026
@infernus01 infernus01 force-pushed the CVE-2025-61729-v0.42.1 branch from b7c1097 to b514114 Compare March 5, 2026 07:19
@pratap0007
Copy link
Contributor

/ok-to-test

@pratap0007
Copy link
Contributor

/retest

@infernus01 infernus01 force-pushed the CVE-2025-61729-v0.42.1 branch from b514114 to 8d3d44c Compare March 5, 2026 08:10
Signed-off-by: Shubham Bhardwaj <shubbhar@redhat.com>
@infernus01 infernus01 force-pushed the CVE-2025-61729-v0.42.1 branch from 8d3d44c to 8eea2e3 Compare March 5, 2026 08:19
@tekton-robot tekton-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Mar 5, 2026
@infernus01
Copy link
Member Author

/retest

2 similar comments
@pratap0007
Copy link
Contributor

/retest

@pratap0007
Copy link
Contributor

/retest

@pratap0007
Copy link
Contributor

/lgtm
/approve

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Mar 5, 2026
@tekton-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: pratap0007
To complete the pull request process, please assign piyush-garg after the PR has been reviewed.
You can assign the PR to them by writing /assign @piyush-garg in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bug Categorizes issue or PR as related to a bug. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants