update builder to 1.26 and fix x/net by weshayutin · Pull Request #177 · medik8s/node-maintenance-operator

weshayutin · 2026-07-23T02:34:29Z

rhel-9-release-golang-1.26-openshift-5.0

CVE fixes: Bumped golang.org/x/net from
v0.53.0 → v0.57.0 (latest available, well
past the v0.55.0 fixed version), which resolves:

CVE-2026-25681 (XSS via x/net/html)
CVE-2026-27136 (XSS via HTML parsing bypass)
CVE-2026-39821 (privilege escalation via Punycode/x/net/idna) Since go get pulls the golang.org/x/* module family together, this also upgraded co-versioned
indirect deps: x/mod 0.35.0→0.37.0, x/sync 0.20.0→0.22.0, x/sys 0.43.0→0.47.0, x/term 0.42.0→0.45.0, x/text
0.36.0→0.40.0, x/tools 0.44.0→0.47.0.

hel-9-release-golang-1.26-openshift-5.0 CVE fixes: Bumped golang.org/x/net from v0.53.0 → v0.57.0 (latest available, well past the v0.55.0 fixed version), which resolves: CVE-2026-25681 (XSS via x/net/html) CVE-2026-27136 (XSS via HTML parsing bypass) CVE-2026-39821 (privilege escalation via Punycode/x/net/idna) Since go get pulls the golang.org/x/* module family together, this also upgraded co-versioned indirect deps: x/mod 0.35.0→0.37.0, x/sync 0.20.0→0.22.0, x/sys 0.43.0→0.47.0, x/term 0.42.0→0.45.0, x/text 0.36.0→0.40.0, x/tools 0.44.0→0.47.0. Signed-off-by: Wesley Hayutin <weshayutin@gmail.com>

coderabbitai · 2026-07-23T02:34:38Z

Important

Review skipped

Too many files!

This PR contains 150 files, which is 50 over the limit of 100.

To get a review, narrow the scope:
• coderabbit review --committed # exclude uncommitted changes
• coderabbit review --dir # limit to a subdirectory
• coderabbit review --base # compare against a closer base

Upgrade to a paid plan to raise the limit.

This review couldn't start because sufficient usage credits or metered capacity aren't available. Add credits or update usage-based reviews in the billing tab, then retry.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: c28efd43-767a-45e4-83b4-a795d36821d5

📥 Commits

Reviewing files that changed from the base of the PR and between 8f4ab3b and f275fba.

⛔ Files ignored due to path filters (1)

go.sum is excluded by !**/*.sum

📒 Files selected for processing (160)

.ci-operator.yaml
go.mod
vendor/golang.org/x/net/html/entity.go
vendor/golang.org/x/net/html/escape.go
vendor/golang.org/x/net/html/foreign.go
vendor/golang.org/x/net/html/parse.go
vendor/golang.org/x/net/html/render.go
vendor/golang.org/x/net/html/token.go
vendor/golang.org/x/net/http2/README.md
vendor/golang.org/x/net/http2/client_conn_pool.go
vendor/golang.org/x/net/http2/clientconn.go
vendor/golang.org/x/net/http2/config.go
vendor/golang.org/x/net/http2/hpack/tables.go
vendor/golang.org/x/net/http2/http2.go
vendor/golang.org/x/net/http2/server.go
vendor/golang.org/x/net/http2/server_common.go
vendor/golang.org/x/net/http2/server_wrap.go
vendor/golang.org/x/net/http2/transport.go
vendor/golang.org/x/net/http2/transport_common.go
vendor/golang.org/x/net/http2/transport_wrap.go
vendor/golang.org/x/net/http2/writesched.go
vendor/golang.org/x/net/http2/writesched_common.go
vendor/golang.org/x/net/http2/writesched_priority_rfc7540.go
vendor/golang.org/x/net/http2/writesched_priority_rfc9218.go
vendor/golang.org/x/net/http2/writesched_random.go
vendor/golang.org/x/net/http2/writesched_roundrobin.go
vendor/golang.org/x/net/idna/go118.go
vendor/golang.org/x/net/idna/idna.go
vendor/golang.org/x/net/idna/idna9.0.0.go
vendor/golang.org/x/net/idna/pre_go118.go
vendor/golang.org/x/net/idna/punycode.go
vendor/golang.org/x/net/idna/tables10.0.0.go
vendor/golang.org/x/net/idna/tables11.0.0.go
vendor/golang.org/x/net/idna/tables12.0.0.go
vendor/golang.org/x/net/idna/tables13.0.0.go
vendor/golang.org/x/net/idna/tables15.0.0.go
vendor/golang.org/x/net/idna/tables17.0.0.go
vendor/golang.org/x/net/idna/tables9.0.0.go
vendor/golang.org/x/net/idna/trie12.0.0.go
vendor/golang.org/x/net/idna/trie13.0.0.go
vendor/golang.org/x/net/internal/httpcommon/request.go
vendor/golang.org/x/sync/errgroup/errgroup.go
vendor/golang.org/x/sync/singleflight/singleflight.go
vendor/golang.org/x/sys/unix/affinity_linux.go
vendor/golang.org/x/sys/unix/mkall.sh
vendor/golang.org/x/sys/unix/mkerrors.sh
vendor/golang.org/x/sys/unix/readv_unix.go
vendor/golang.org/x/sys/unix/syscall_darwin.go
vendor/golang.org/x/sys/unix/syscall_linux.go
vendor/golang.org/x/sys/unix/syscall_linux_386.go
vendor/golang.org/x/sys/unix/syscall_linux_amd64.go
vendor/golang.org/x/sys/unix/syscall_linux_arm.go
vendor/golang.org/x/sys/unix/syscall_linux_arm64.go
vendor/golang.org/x/sys/unix/syscall_linux_loong64.go
vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go
vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go
vendor/golang.org/x/sys/unix/syscall_linux_ppc.go
vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go
vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go
vendor/golang.org/x/sys/unix/syscall_linux_s390x.go
vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go
vendor/golang.org/x/sys/unix/syscall_openbsd.go
vendor/golang.org/x/sys/unix/zerrors_linux.go
vendor/golang.org/x/sys/unix/zerrors_linux_386.go
vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go
vendor/golang.org/x/sys/unix/zerrors_linux_arm.go
vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go
vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go
vendor/golang.org/x/sys/unix/zerrors_linux_mips.go
vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go
vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go
vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go
vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go
vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go
vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go
vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go
vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go
vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go
vendor/golang.org/x/sys/unix/zsyscall_linux.go
vendor/golang.org/x/sys/unix/zsyscall_linux_386.go
vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go
vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_loong64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go
vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc.go
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go
vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go
vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go
vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.s
vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go
vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.s
vendor/golang.org/x/sys/unix/zsysnum_linux_386.go
vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go
vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_loong64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go
vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go
vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go
vendor/golang.org/x/sys/unix/zsysnum_linux_ppc.go
vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go
vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go
vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go
vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go
vendor/golang.org/x/sys/unix/ztypes_linux.go
vendor/golang.org/x/sys/unix/ztypes_linux_386.go
vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go
vendor/golang.org/x/sys/unix/ztypes_linux_arm.go
vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go
vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go
vendor/golang.org/x/sys/unix/ztypes_linux_mips.go
vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go
vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go
vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go
vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go
vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go
vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go
vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go
vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go
vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go
vendor/golang.org/x/sys/windows/security_windows.go
vendor/golang.org/x/sys/windows/syscall_windows.go
vendor/golang.org/x/sys/windows/types_windows.go
vendor/golang.org/x/sys/windows/zsyscall_windows.go
vendor/golang.org/x/text/unicode/norm/forminfo.go
vendor/golang.org/x/text/unicode/norm/iter.go
vendor/golang.org/x/text/unicode/norm/normalize.go
vendor/golang.org/x/tools/go/ast/edge/edge.go
vendor/golang.org/x/tools/go/packages/golist.go
vendor/golang.org/x/tools/go/packages/packages.go
vendor/golang.org/x/tools/go/types/objectpath/objectpath.go
vendor/golang.org/x/tools/internal/gcimporter/iexport.go
vendor/golang.org/x/tools/internal/gcimporter/iimport.go
vendor/golang.org/x/tools/internal/gcimporter/ureader.go
vendor/golang.org/x/tools/internal/gocommand/version.go
vendor/golang.org/x/tools/internal/stdlib/deps.go
vendor/golang.org/x/tools/internal/stdlib/manifest.go
vendor/golang.org/x/tools/internal/typesinternal/element.go
vendor/golang.org/x/tools/internal/typesinternal/types.go
vendor/golang.org/x/tools/internal/typesinternal/zerovalue.go
vendor/modules.txt

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

weshayutin · 2026-07-23T02:34:54Z

/cherry-pick release-0.21

openshift-cherrypick-robot · 2026-07-23T02:34:58Z

@weshayutin: once the present PR merges, I will cherry-pick it on top of release-0.21 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-0.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

razo7 · 2026-07-23T13:57:00Z

/retest

Signed-off-by: Wesley Hayutin <weshayutin@gmail.com>

weshayutin · 2026-07-24T19:51:35Z

/retest

openshift-ci · 2026-07-26T07:59:50Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: razo7, weshayutin

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [razo7,weshayutin]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

razo7 · 2026-07-26T08:01:53Z

/cherry-pick release-0.21

openshift-cherrypick-robot · 2026-07-26T08:01:56Z

@razo7: once the present PR merges, I will cherry-pick it on top of release-0.21 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-0.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-cherrypick-robot · 2026-07-26T08:03:44Z

@weshayutin: new pull request created: #179

Details

In response to this:

/cherry-pick release-0.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci Bot requested review from mshitrit and razo7 July 23, 2026 02:34

openshift-ci Bot added the approved label Jul 23, 2026

update builder to 1.26

f275fba

Signed-off-by: Wesley Hayutin <weshayutin@gmail.com>

razo7 approved these changes Jul 26, 2026

View reviewed changes

openshift-ci Bot assigned razo7 Jul 26, 2026

openshift-ci Bot added the lgtm label Jul 26, 2026

openshift-merge-bot Bot merged commit 170efcf into medik8s:main Jul 26, 2026
16 checks passed

openshift-cherrypick-robot mentioned this pull request Jul 26, 2026

[release-0.21] update builder to 1.26 and fix x/net #179

Merged

Navigation Menu

Uh oh!

update builder to 1.26 and fix x/net - #177

update builder to 1.26 and fix x/net#177
openshift-merge-bot[bot] merged 2 commits into
medik8s:mainfrom
weshayutin:maincve

weshayutin commented Jul 23, 2026

Uh oh!

coderabbitai Bot commented Jul 23, 2026 •

edited

Loading

Review skipped

Uh oh!

weshayutin commented Jul 23, 2026

Uh oh!

openshift-cherrypick-robot commented Jul 23, 2026

Uh oh!

razo7 commented Jul 23, 2026

Uh oh!

weshayutin commented Jul 24, 2026

Uh oh!

openshift-ci Bot commented Jul 26, 2026

Uh oh!

razo7 commented Jul 26, 2026

Uh oh!

openshift-cherrypick-robot commented Jul 26, 2026

Uh oh!

Uh oh!

openshift-cherrypick-robot commented Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

weshayutin commented Jul 23, 2026

Uh oh!

coderabbitai Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

weshayutin commented Jul 23, 2026

Uh oh!

openshift-cherrypick-robot commented Jul 23, 2026

Uh oh!

razo7 commented Jul 23, 2026

Uh oh!

weshayutin commented Jul 24, 2026

Uh oh!

openshift-ci Bot commented Jul 26, 2026

Uh oh!

razo7 commented Jul 26, 2026

Uh oh!

openshift-cherrypick-robot commented Jul 26, 2026

Uh oh!

Uh oh!

openshift-cherrypick-robot commented Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

coderabbitai Bot commented Jul 23, 2026 •

edited

Loading