Repository navigation
Add akarol to OWNERS - #61
redhat-chai-bot wants to merge 6 commits into
Conversation
…0260921-1 Fix 8 CVEs (CVE-2026-56854, CVE-2026-56864, CVE-2026-56865, ...)
Upgrade golang.org/x/net to v0.60.0 to fix CVE-2026-78669 (HIGH severity). CVE-2026-78669: net/http: golang.org/x/net/http2: Denial of Service via excessive HTTP/2 SETTINGS frames This version includes all HTTP/2 security fixes: - GO-2026-6603: HTTP/2 server memory exhaustion (Trailer headers) - GO-2026-6610: HTTP/2 transport malformed framing headers - GO-2026-6611: Excessive CPU consumption (initial window changes) - GO-2026-6612: Double flow control refund on HTTP/2 streams - GO-2026-6617: HTTP/2 server crash (HPACK encoder race) Note: v0.61.0 only adds a QUIC protocol fix which is not relevant for OADP/Velero operations that use HTTP/1.1 and HTTP/2 over TCP. CI/Build fixes (required by Go 1.26 toolchain bump): - Bump Containerfile and Containerfile.download from golang:1.25-alpine to golang:1.26-alpine - Upgrade golangci-lint from 2.6.1 to 2.9.0 (first version built with Go 1.26) - Update golangci-lint checksums in tools/gettool/checksums.txt Co-authored-by: Cursor <cursoragent@cursor.com>
Go 1.26's new(expr) builtin allows allocating a pointer to an initialized value directly, which golangci-lint's modernize linter now flags as a simplification opportunity. Applied the suggested fixes across snapshot/policy and repo/blob/azure: - Replace &x with new(x) in pointer-wrapper helper functions (NewLogDetail, NewOptionalBool, newOptionalInt, newOptionalInt64, NewOSSnapshotMode) and at their call sites. - Replace to.Ptr(v) with new(v) in azure_storage.go, dropping the now-unused azcore/to import. - Replace NumField/Field index loops with Type.Fields() range iteration in policy_merge_test.go. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Fix wsl_v5 whitespace-around-statements violations (blank line required/forbidden before return, inc-dec, assign, if, range and for statements) across cli, repo, internal, and tests/tools packages by adding/removing blank lines per the linter's rules. No logic changes. Exclude the revive var-naming check for package names (fs, crypto, hmac, user) that conflict with Go stdlib package names: these are long-standing package names inherited from upstream kopia, and renaming them would require updating every import site across the codebase, which is out of scope for a lint cleanup. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…/CVE-2026-78669 CVE fix/oadp vmdp/oadp 1.6/CVE 2026 78669
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Hi @redhat-chai-bot. Thanks for your PR. I'm waiting for a migtools member to verify that this patch is reasonable to test. If it is, they should reply with Tip We noticed you've done this a few times! Consider joining the org to skip this step and gain Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
d2146a9 to
feb71c0
Compare
openshift-ci
Bot
added
do-not-merge/invalid-owners-file
and removed
needs-rebase
labels
feb71c0 to
2cde119
Compare
|
@redhat-chai-bot rebase |
2cde119 to
b56c351
Compare
|
The OWNERS file contains untrusted users, which makes it INVALID. The following users are mentioned in OWNERS file(s) but are untrusted for the following reasons. One way to make the user trusted is to add them as members of the migtools org. You can then trigger verification by writing
|
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
b56c351 to
ad5dc9a
Compare
|
New changes are detected. LGTM label has been removed. |
|
PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: redhat-chai-bot The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
1 similar comment
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: redhat-chai-bot The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
/ok-to-test |
Add
akarolas approver and reviewer.AI-generated. Review for accuracy.
@Joeavaikath requested from Slack