kcl-lang / kcl-openapi

64%

main: 64%

LAST BUILD ON BRANCH fix/govulncheck-2026-08

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• add-map-to-kcl-value
• amyXia1994-patch-1
• bugfix-143-multiple-validations
• bump/cla
• chore-bump-regex-match-func
• chore-deprecated-cli
• chore-update-cla-version
• chore/docker-release-config
• chore/migrate-repo
• chore/update-release-ci
• ci-update-test-condition
• cleanup_ioutil
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/checkout-7
• dependabot/github_actions/actions/setup-go-5
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/actions/setup-go-7
• dependabot/github_actions/actions/setup-python-5
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/setup-python-7
• dependabot/github_actions/docker/login-action-3
• dependabot/github_actions/goreleaser/goreleaser-action-6
• dependabot/go_modules/github.com/go-openapi/errors-0.22.0
• dependabot/go_modules/github.com/go-openapi/errors-0.22.1
• dependabot/go_modules/github.com/go-openapi/errors-0.22.2
• dependabot/go_modules/github.com/go-openapi/errors-0.22.3
• dependabot/go_modules/github.com/go-openapi/inflect-0.21.0
• dependabot/go_modules/github.com/go-openapi/inflect-0.21.2
• dependabot/go_modules/github.com/go-openapi/inflect-0.21.3
• dependabot/go_modules/github.com/go-openapi/strfmt-0.23.0
• dependabot/go_modules/github.com/go-openapi/strfmt-0.24.0
• dependabot/go_modules/github.com/jessevdk/go-flags-1.6.1
• dependabot/go_modules/github.com/kr/pretty-0.3.1
• dependabot/go_modules/github.com/stretchr/testify-1.10.0
• dependabot/go_modules/github.com/stretchr/testify-1.11.0
• dependabot/go_modules/github.com/stretchr/testify-1.11.1
• dependabot/go_modules/github.com/stretchr/testify-1.9.0
• doc/contributing
• doc/install-approaches
• doc/k8s-pkg-generate
• enhance-int-or-string-array-pattern
• enhance/support-v1-crd-versions
• feat-item-all-pattern
• feat-mangle-property-name-with-quote
• feat-protocol-mixin-suffix
• feat-use-raw-string-for-generated-schema
• feat-yaml-stream-format-input
• feat/18-reuse-existing-models
• feat/22-cel-validations
• feat/35-openapi3-support-v2
• feat/53-package-root
• feat/preprocess-script
• fix
• fix-additional-property-pattern
• fix-all-of-pattern
• fix-default-value-with-x-order-generation
• fix-disable-auto-block-pr-option
• fix-multiple-pattern-in-items-and-additional-properties
• fix-nil-pointer-for-array-branch
• fix-optional-attr-min-and-max-validation-gen
• fix-schema-generation
• fix-split-documents
• fix-typo-in-documents
• fix-yaml-stream-format-input
• fix/147-comment-only-doc-skip
• fix/151-list-pattern-regex
• fix/cel-kcl-valid-output
• fix/conflict-import
• fix/docker-username-pw
• fix/empty-check-blocks
• fix/govulncheck-2026-08
• fix/import-path-under-pkgroot
• fix/issue-165-kin-openapi-bump
• fix/mixin_protocol_suffix
• fix/multiline-default-string
• fix/multiple-version-crdext-v1
• fix/pre-process
• fix/regex-check
• fix/wrong-crd-apiversion
• fix_link
• main
• mangle-system-module-import
• minor/add-version
• refs/tags/v0.5.0
• refs/tags/v0.5.1
• refs/tags/v0.5.2
• refs/tags/v0.5.3
• refs/tags/v0.5.4
• refs/tags/v0.5.5
• refs/tags/v0.6.0
• refs/tags/v0.6.1
• refs/tags/v0.6.2
• refs/tags/v0.6.3
• refs/tags/v0.6.4
• refs/tags/v0.6.5
• refs/tags/v0.6.6
• refs/tags/v0.7.0
• refs/tags/v0.8.0
• refs/tags/v0.9.0
• support-int-or-str
• workflow/sync-k8s-models

Build # 33360851829

Build Type

Pull #168

github

Committed by claude

Commit Message

fix(deps): pin toolchain go1.26.6 and bump x/text, x/net to fix 18 vulns

govulncheck reported 16 stdlib vulnerabilities plus 2 module vulns. After
this change, 0 vulnerabilities remain in code paths.

  - toolchain go1.26.6 (fixes 16 stdlib vulns)
  - golang.org/x/text v0.29.0 -> v0.39.0 (GO-2026-5970)
  - golang.org/x/net v0.44.0 -> v0.55.0 (GO-2026-5026)

Signed-off-by: Claude <claude@anthropic.com>

Pull Request Pull Request #168: fix(deps): bump golang.org/x/net and golang.org/x/text to address security advisories

Coverage Stats

2690 of 4184 relevant lines covered (64.29%)

0.72 hits per line