COMMITS
May 27, 2026
K
Merge pull request #1142 from kubernetes-csi/dependabot/github_actions/github/codeql-action-4.36.0
Kubernetes Prow Robot committed
D
chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0
dependabot[bot] committed
May 26, 2026
K
Merge pull request #1140 from sbiradar10/CVE-master
Kubernetes Prow Robot committed
S
CVE-2026-35469: Bump github.com/moby/spdystream@v0.5.1
Shiwani Biradar committed
K
Merge pull request #1139 from kubernetes-csi/dependabot/github_actions/golangci/golangci-lint-action-9.2.1
Kubernetes Prow Robot committed
D
chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1
dependabot[bot] committed
May 25, 2026
K
Merge pull request #1137 from kubernetes-csi/dependabot/docker/build-image/debian-base-bookworm-v1.0.8
Kubernetes Prow Robot committed
May 24, 2026
D
chore(deps): bump build-image/debian-base
dependabot[bot] committed
K
Merge pull request #1132 from kubernetes-csi/dependabot/github_actions/github/codeql-action-4.35.5
Kubernetes Prow Robot committed
May 20, 2026
K
Merge pull request #1136 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.29.0
Kubernetes Prow Robot committed
D
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0
dependabot[bot] committed
May 19, 2026
K
Merge pull request #1135 from kubernetes-csi/dependabot/go_modules/github.com/onsi/gomega-1.41.0
Kubernetes Prow Robot committed
D
chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0
dependabot[bot] committed
May 16, 2026
K
Merge pull request #1131 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.81.1
Kubernetes Prow Robot committed
May 15, 2026
D
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5
dependabot[bot] committed
May 14, 2026
D
chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1
dependabot[bot] committed
May 11, 2026
A
Merge pull request #1128 from andyzhangx/go1.26.3
Andy Zhang committed
A
Merge commit '978e46adc8b16412114e2f253460db15461956bf' into go1.26.3
andyzhangx committed
A
Squashed 'release-tools/' changes from 90925279..e019f2a7
andyzhangx committed
May 9, 2026
K
Merge pull request #1125 from kubernetes-csi/dependabot/go_modules/golang.org/x/mod-0.36.0
Kubernetes Prow Robot committed
May 8, 2026
D
chore(deps): bump golang.org/x/mod from 0.35.0 to 0.36.0
dependabot[bot] committed
K
Merge pull request #1121 from kubernetes-csi/dependabot/github_actions/github/codeql-action-4.35.4
Kubernetes Prow Robot committed
A
Merge pull request #1122 from andyzhangx/fix-trivy-go-version
Andy Zhang committed
A
chore: bump Go version to 1.25.10 in trivy workflow
andyzhangx committed
May 7, 2026
D
chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4
dependabot[bot] committed
A
Merge pull request #1118 from andyzhangx/fix-snapshot-timestamps
Andy Zhang committed
May 6, 2026
A
fix: avoid err shadowing and guard directory entries against symlinks
Andy Zhang committed
A
fix: guard against zero timestamps and symlink-at-filePath attacks
Andy Zhang committed
May 5, 2026
A
fix: use 1s tolerance for timestamp assertions in tests
Andy Zhang committed
A
fix: walk ancestors for symlink guard and return tar.ErrInsecurePath
Andy Zhang committed