grafana / loki

65%

master: 65%

LAST BUILD ON BRANCH operator-cves

branch: operator-cves

CHANGE BRANCH

x

Reset

• operator-cves
• 2304-fix-gomod
• LOG-5470
• LOG-6083
• LOG-6238-2nd
• LOG-6493
• LOG-6641
• LOG-6782
• LOG-6810
• LOG-6810-v2
• LOG-6862
• LOG-7198
• LOG-7377-kafka-ep
• LOG-8330
• LOG-8331
• LOG-8332
• LOG-9353
• autoforget_unhealthy
• azure-secret-sts
• backport-20694-to-release-3.5.x
• backport-20694-to-release-3.6.x
• backport-gzip-fix-release-3.6.x
• benclive/implement-tsdb-consumer
• bump-go
• bump-go-1.25
• chaudum/dockerfmt
• chaudum/fix-wording-loki-operator-adopters
• chore-multiple-buckets
• chore/typo-sweep
• config-testdata
• danhopper/automemlimit
• dependabot/go_modules/operator/golang.org/x/crypto-0.31.0
• dependabot/go_modules/operator/golang.org/x/crypto-0.45.0
• deps-update/go-golang.org-x-crypto-vulnerability
• deps-update/go-golang.org-x-net-vulnerability
• deps-update/https-github.comgrafanaloki.git
• deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlplog-otlploghttp-vulnerability
• deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-vulnerability
• deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-vulnerability
• deps-update/main-go-golang.org-x-crypto-vulnerability
• deps-update/main-go-golang.org-x-net-vulnerability
• deps-update/main-go-golang.org-x-oauth2-vulnerability
• deps-update/main-https-github.comgrafanaloki.git
• deps-update/main-lock-file-maintenance
• deps-update/release-2.9.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-2.9.x-go-golang.org-x-net-vulnerability
• deps-update/release-2.9.x-go-golang.org-x-oauth2-vulnerability
• deps-update/release-2.9.x-go-google.golang.org-protobuf-vulnerability
• deps-update/release-3.2.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.2.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.3.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.3.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.3.x-go-golang.org-x-oauth2-vulnerability
• deps-update/release-3.4.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.4.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.4.x-go-golang.org-x-oauth2-vulnerability
• deps-update/release-3.5.x-go-github.com-buger-jsonparser-vulnerability
• deps-update/release-3.5.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.5.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.5.x-go-google.golang.org-grpc-vulnerability
• deps-update/release-3.6.x-go-1.x
• deps-update/release-3.6.x-go-github.com-grafana-loki-v3-vulnerability
• deps-update/release-3.6.x-go-go.opentelemetry.io-otel-vulnerability
• deps-update/release-3.6.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.6.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.6.x-go-golang.org-x-sys-vulnerability
• deps-update/release-3.6.x-go-google.golang.org-grpc-vulnerability
• deps-update/release-3.6.x-golang-version-go-vulnerability
• deps-update/release-3.6.x-golang.org-x-crypto-0.x
• deps-update/release-3.6.x-golang.org-x-net-0.x
• deps-update/release-3.6.x-golang.org-x-sys-0.x
• deps-update/release-3.6.x-opentelemetry-go-monorepo
• deps-update/release-3.6.x-security-operator-go
• deps-update/release-3.6.x-security-operator-go.opentelemetry.iootel
• deps-update/release-3.6.x-security-operator-golang.orgxcrypto
• deps-update/release-3.6.x-security-operator-golang.orgxnet
• deps-update/release-3.6.x-security-operator-golang.orgxsys
• deps-update/release-3.7.x-go-go.opentelemetry.io-otel-exporters-otlp-otlplog-otlploghttp-vulnerability
• deps-update/release-3.7.x-go-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-vulnerability
• deps-update/release-3.7.x-go-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-vulnerability
• deps-update/release-3.7.x-go-go.opentelemetry.io-otel-sdk-vulnerability
• deps-update/release-3.7.x-go-golang.org-x-crypto-vulnerability
• deps-update/release-3.7.x-go-golang.org-x-net-vulnerability
• deps-update/release-3.7.x-go-golang.org-x-sys-vulnerability
• deps-update/release-3.7.x-go-patch-updates
• deps-update/release-3.7.x-golang-version-go-vulnerability
• deps-update/release-3.7.x-golang.org-x-crypto-0.x
• deps-update/release-3.7.x-golang.org-x-net-0.x
• deps-update/release-3.7.x-golang.org-x-sys-0.x
• deps-update/release-3.7.x-security-operator-go
• deps-update/release-3.7.x-security-operator-golang.orgxcrypto
• deps-update/release-3.7.x-security-operator-golang.orgxnet
• deps-update/release-3.7.x-security-operator-golang.orgxsys
• disable-external-access
• enable-time-sharding
• endpoint-slices
• fcjack/patch-vulnerabilities-3.5
• feat/dataobj-tsdb
• feat/s3-sse-c-support
• find-bad-package
• fix-cves
• fix-docs-forcepathstyle
• fix-k290
• fix-latency-alert
• fix-linter
• fix-maximum-openshift
• fix-noobaa
• fix-operator-ci
• fix-operator-push
• fix-pico-delete
• fix-release-3.6.x-CVEs
• fix-release-3.7.x-CVEs
• fix-remoteWriteAuthType
• fix-website
• fix/rego-policy-v1
• fix/support-vpc-s3-endpoint-19243
• fix/webhook-secret-name
• go-mod-tidy
• go-mod-tidy-submodules
• golang-update
• golangci
• grobinson/update-images-go-1-24
• improve-message
• improve-quickstart
• ingester-ha
• ingester-timeout
• ingesterMinAvail
• leader-election
• log-6380
• log-6577
• log-6987-unhealthy-nodes
• loki-3.4.2
• loki-3.4.3
• loki-operator-0.10.0
• loki-operator-0.10.1
• loki-operator-0.8.1
• lokistack-metrics
• lokistack-resource-limits
• main
• maxopenshift-version
• maxopenshiftversion-422
• meher/pattern-parser-engine-v2
• meher/update-to-go-1.26
• mergo-v1
• migrate-to-thanos-objstore
• modernize
• network-observ
• olmv1
• operator-1.26.3
• operator-bump-deps
• operator-ci-optimizations
• operator-deps-bump
• operator-fix-component-alert
• operator-fix-wrong-annotation
• operator-hub-category
• operator-loki-3.5.4
• operator-loki-3.5.5
• operator-loki-3.6.4
• operator-loki-v3
• operator-make-file
• operator-np-proxy
• operator-np-swift
• operator-opa
• operator-release-0.10.2
• operator-relese-pr-commits
• operator-remove-a
• operator-remove-cross
• operator-simplify
• operator-update-go
• operator-update-linter
• operator-update-tools
• operator-workaround-sts
• otlp-docs
• otlp-support-drop
• patch-1
• pattern-ingester
• paul1r/operator_dockerfile
• refactor-networkpolicies
• release-operator-0.8.0
• release-please--branches--main--components--operator
• remote-write-replica-label
• remove-kube-rbac-proxy-dep
• s3-path-validation
• salvacorts/update-go-1.25.7
• shantanu/patch-k290-images
• skip-query-writeback-older-than
• spiridonov-agg-sharding
• tokenfile
• update-bingo
• update-linter
• update-loki-3.3.2
• update-maximum
• update-openshift-versions
• upgrade-go-stdlib
• upgrade-golang-oauth2

Build # 25680262840

Build Type

Pull #21810

github

Committed by JoaoBraveCoding

Commit Message

chore(operator): Bump dependencies to fix CVEs

CVE-2026-39882
CVE-2026-39883
CVE-2026-42151
CVE-2026-42154

Pull Request Pull Request #21810: chore(operator): Bump dependencies to fix CVEs

Coverage Stats

8248 of 12783 relevant lines covered (64.52%)

0.7 hits per line