opendefensecloud / artifact-conduit / 34971367086
86%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 12
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.262% (-0.5%) from 85.762%
34971367086

push

github

web-flow 
fix(deps): bump grpc to v1.83.2 to clear OSV advisories (#488)

## What
Bump `google.golang.org/grpc` from v1.82.1 to v1.83.2 to clear three OSV
advisories that have been failing the OSV-Scanner workflow on `main`.

## Why
The OSV-Scanner workflow has failed on every push to `main` and every
scheduled run since at least 2026-09-08. It reports one affected package
with three advisories:

| Advisory | CVSS | Fixed in |
| --- | --- | --- |
| [GHSA-vp52-pcj8-j9qc](https://osv.dev/GHSA-vp52-pcj8-j9qc) | 8.7 |
v1.83.1 |
| [GHSA-qc2q-p7wx-3px3](https://osv.dev/GHSA-qc2q-p7wx-3px3) | 6.3 |
v1.83.1 |
| [GHSA-2v4p-qf9q-27wj](https://osv.dev/GHSA-2v4p-qf9q-27wj) | — |
v1.83.2 |

CI points at v1.83.1 as the fixed version for the first two, but v1.83.1
is itself affected by the third, so this goes straight to v1.83.2.

## Testing
- `osv-scanner scan source -L go.mod` (v2.5.1, same version as CI) — **0
vulnerabilities**, was 3
- `go build ./...` — clean
- `make test` — all suites pass, envtest included

## Notes for reviewers
grpc is an indirect dependency, so there are no source changes — only
`go.mod` / `go.sum`. `go mod tidy` pulled the accompanying transitive
patch bumps: `cel.dev/expr`, `golang.org/x/crypto`, `golang.org/x/mod`,
`golang.org/x/net`, `golang.org/x/text`, `golang.org/x/tools`.

No CRD/API, RBAC, or watch changes. No breaking changes.

## Checklist
- [x] ~~Tests added/updated~~ n/a: dependency bump, existing suite
covers it
- [x] No breaking changes (or upgrade path documented above)
- [x] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **Chores**
  - This update contains internal maintenance only.
- No new features, behavior changes, or user-visible fixes are included.
- The product experience remains unchanged, including available
capabilities, workflows, interfaces, and conf... (continued)

1024 of 1201 relevant lines covered (85.26%)

942.79 hits per line

Coverage Regressions

Lines Coverage ∆ File
6
79.52
-1.45% pkg/controller/order_controller.go
2
81.71
-0.81% pkg/controller/workflow_handler.go
Jobs
ID Job ID Ran Files Coverage
1 34971367086.1 12
85.26
GitHub Action Run
Source Files on build 34971367086