kyma-project / compass-manager

26%

main: 26%

LAST BUILD ON BRANCH 1.0.34

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• 1.0.27
• 1.0.28
• 1.0.29
• 1.0.30
• 1.0.30-alpha
• 1.0.31
• 1.0.32
• 1.0.33
• 1.0.34
• Disper-patch-3
• Supply-chain-hardening-pin-sha
• add-component-config
• add-env-protection-upload-release-report
• add-perms
• add-perms-2
• bump-go
• change-dependencies
• change-path
• ci/add-dev-semver-pr-tag
• ci/bump-go-1.27.2
• ci/codeowners-no-tw-for-design-docs
• ci/remove-contributor-from-codeowners-overrides
• ci/revert-sha-pinning
• ci/unpin-image-builder
• coverage-filtering
• delete-cover
• dependabot/go_modules/github.com/kyma-project/lifecycle-manager/api-1.0.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.25.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.26.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.5
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.28.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.28.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.29.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.31.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.32.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.32.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.33.0
• dependabot/go_modules/github.com/onsi/gomega-1.38.3
• dependabot/go_modules/github.com/onsi/gomega-1.39.0
• dependabot/go_modules/github.com/onsi/gomega-1.39.1
• dependabot/go_modules/github.com/onsi/gomega-1.41.0
• dependabot/go_modules/github.com/onsi/gomega-1.42.1
• dependabot/go_modules/github.com/onsi/gomega-1.43.0
• dependabot/go_modules/github.com/onsi/gomega-1.44.0
• dependabot/go_modules/github.com/prometheus/client_golang-1.23.0
• dependabot/go_modules/github.com/prometheus/client_golang-1.23.2
• dependabot/go_modules/github.com/prometheus/client_golang-1.24.0
• dependabot/go_modules/github.com/prometheus/client_golang-1.24.1
• dependabot/go_modules/github.com/sirupsen/logrus-1.10.2
• dependabot/go_modules/github.com/sirupsen/logrus-1.9.4
• dependabot/go_modules/github.com/stretchr/testify-1.12.1
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.31
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.32
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.33
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.34
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.35
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.36
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.37
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.60
• dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.64
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• dependabot/go_modules/k8s-0415d86afd
• dependabot/go_modules/k8s-08aaead50f
• dependabot/go_modules/k8s-2c68e5ab67
• dependabot/go_modules/k8s-53e96f5bee
• dependabot/go_modules/k8s-584c9e40f9
• dependabot/go_modules/k8s-69e18a5b0a
• dependabot/go_modules/k8s-9b98bb80d7
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.22.1
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.22.2
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.22.3
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.22.4
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.23.0
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.23.1
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.23.3
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.24.0
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.24.1
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.25.0
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.25.2
• fix-hasi
• fix-release-workflow
• fix/build-image-gate-condition
• fix/govulncheck-action
• fix/release-workflow-environment-gate
• fix/release-workflow-image-build
• fix/secure-workflows
• fix/update-go-runtime-1.27.3
• fix/update-go-version-to-1.26
• main
• paths
• pr-bot/configuration
• release-report-ci
• rename-workflow
• renovate/actions-checkout-6.x
• renovate/actions-setup-go-6.x
• renovate/actions-setup-go-7.x
• renovate/dario.cat-mergo-1.x
• renovate/fgrosse-go-coverage-report-digest
• renovate/github.com-emicklei-go-restful-v3-3.x
• renovate/github.com-evanphx-json-patch-5.x
• renovate/github.com-fsnotify-fsnotify-1.x
• renovate/github.com-fxamacker-cbor-v2-2.x
• renovate/github.com-go-jose-go-jose-v3-3.x
• renovate/github.com-go-logr-logr-1.x
• renovate/github.com-google-gnostic-models-0.x
• renovate/github.com-google-pprof-digest
• renovate/github.com-kyma-project-lifecycle-manager-api-digest
• renovate/github.com-lestrrat-go-jwx-v3-3.x
• renovate/github.com-mailru-easyjson-0.x
• renovate/github.com-masterminds-semver-v3-3.x
• renovate/github.com-masterminds-sprig-v3-3.x
• renovate/github.com-onsi-ginkgo-v2-2.x
• renovate/github.com-onsi-gomega-1.x
• renovate/github.com-prometheus-client_golang-1.x
• renovate/github.com-prometheus-common-0.x
• renovate/github.com-prometheus-procfs-0.x
• renovate/github.com-sirupsen-logrus-1.x
• renovate/github.com-spf13-pflag-1.x
• renovate/github.com-stretchr-objx-0.x
• renovate/github.com-tidwall-gjson-1.x
• renovate/github.com-tidwall-match-1.x
• renovate/github.com-vektah-gqlparser-v2-2.x
• renovate/go-1.x
• renovate/go-golang.org-x-crypto-vulnerability
• renovate/go-openapi
• renovate/go.uber.org-zap-1.x
• renovate/go.yaml.in-yaml-v2-2.x
• renovate/go.yaml.in-yaml-v2-3.x
• renovate/golang-1.x
• renovate/golang.org-x-crypto-0.x
• renovate/golang.org-x-mod-0.x
• renovate/golang.org-x-net-0.x
• renovate/golang.org-x-oauth2-0.x
• renovate/golang.org-x-sync-0.x
• renovate/golang.org-x-sys-0.x
• renovate/golang.org-x-term-0.x
• renovate/golang.org-x-text-0.x
• renovate/golang.org-x-time-0.x
• renovate/golang.org-x-tools-0.x
• renovate/golangci-golangci-lint-2.x
• renovate/golangci-golangci-lint-action-9.x
• renovate/gomodules.xyz-jsonpatch-v2-2.x
• renovate/gomodules.xyz-jsonpatch-v2-3.x
• renovate/google-github-actions-auth-3.x
• renovate/google-github-actions-setup-gcloud-3.x
• renovate/google.golang.org-protobuf-1.x
• renovate/gopkg.in-evanphx-json-patch.v4-4.x
• renovate/gopkg.in-evanphx-json-patch.v4-5.x
• renovate/k8s.io-klog-v2-2.x
• renovate/k8s.io-kube-openapi-digest
• renovate/k8s.io-utils-digest
• renovate/kubernetes-go
• renovate/kubernetes-monorepo
• renovate/major-github-artifact-actions
• renovate/sigs.k8s.io-controller-runtime-0.x
• renovate/sigs.k8s.io-json-digest
• renovate/sigs.k8s.io-structured-merge-diff-v6-6.x
• renovate/softprops-action-gh-release-3.x
• renovate/step-security-changed-files-digest
• renovate/wechuli-allcheckspassed-digest
• sec/add-codeql
• sec/bump-go-deps
• sec/bump-golang-x-deps
• sec/fix-missing-workflow-permissions
• sec/migrate-to-ghas-codeql
• sec/remove-sec-scanners-config
• skip-gate-renovate
• test-dummy-pr
• test-github
• update-checkout-action-v7
• update-crypto-golang-lib
• upgrade-golang-1.26.5

Build # 40899037379

Build Type

push

github

Committed by web-flow

Commit Message

fix: update Go runtime to 1.27.3 and bump golang.org/x/ deps (#635)

## Summary

Addresses **CVE-2026-111943** — Go emergency security release fixing a
flaw in \`crypto/x509\` that allows compromised intermediate CA
certificates to bypass revocation checks.

### Changes

| File | Change |
|------|--------|
| \`Dockerfile\` | \`golang:1.27.2-alpine3.24\` →
\`golang:1.27.3-alpine3.24\` |
| \`go.mod\` | \`go 1.27.2\` → \`go 1.27.3\` |
| \`go.mod\` | \`x/mod\` \`v0.41.0\` → \`v0.42.0\`, \`x/time\`
\`v0.15.0\` → \`v0.16.0\`, \`x/tools\` \`v0.51.0\` → \`v0.52.0\` |
| \`go.sum\` | Updated checksums |

### References
-
https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html
- CVE-2026-111943

Coverage Stats

722 of 2823 relevant lines covered (25.58%)

0.26 hits per line