Skip to content

fix(deps): vuln minor upgrades — 5 packages (minor: 5) [test/e2e/go.mod] - #3518

Draft
gh-worker-campaigns-3e9aa4[bot] wants to merge 2 commits into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/e2e/0-1790583251
Draft

gh-worker-campaigns-3e9aa4[bot] wants to merge 2 commits into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/e2e/0-1790583251

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Security update — 5 packages upgraded (MINOR changes included)

Manifests changed:

  • test/e2e/go.mod (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.20.0 v0.22.0 minor Transitive 2 MEDIUM
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 v1.46.0 minor Transitive 2 LOW
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 v1.46.0 minor Transitive 2 LOW
go.opentelemetry.io/otel/sdk v1.44.0 v1.46.0 minor Transitive 2 LOW
golang.org/x/crypto v0.56.0 v0.57.0 minor Transitive 1 UNKNOWN

Security Details

ℹ️ Other Vulnerabilities (9)
Package CVE Severity Summary Unsafe Version Fixed In Case
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc GHSA-w34q-cm8f-9c5x MODERATE OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning v0.20.0 0.21.0 -
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc CVE-2026-81871 MODERATE OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning v0.20.0 - -
go.opentelemetry.io/otel/exporters/otlp/otlptrace GHSA-8wmf-6v46-5gfg LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 1.45.0 -
go.opentelemetry.io/otel/exporters/otlp/otlptrace CVE-2026-81870 LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 - -
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc GHSA-8wmf-6v46-5gfg LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 1.45.0 -
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc CVE-2026-81870 LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 - -
go.opentelemetry.io/otel/sdk GHSA-8wmf-6v46-5gfg LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 1.45.0 -
go.opentelemetry.io/otel/sdk CVE-2026-81870 LOW OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs v1.44.0 - -
golang.org/x/crypto GO-2026-5932 unknown The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues v0.56.0 - -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Pipelines  Code Coverage

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 4 Pipeline jobs failed

DataDog/datadog-operator | go_e2e_deps — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

DataDog/datadog-operator | lint_e2e — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

pull request linter | Check Milestone

View more details · View in GitHub Actions

View all 4 failed jobs.

ℹ️ Info

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 52.52% (+0.00%)

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: e253a53 | Docs | View more details | Give us feedback!

@gh-worker-campaigns-3e9aa4

gh-worker-campaigns-3e9aa4 Bot commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto b152e10.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-019303
dd-octo-sts-019303 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/go/e2e/0-1790583251 branch from 6c67bd8 to af35a90 Compare September 30, 2026 10:26
dd-octo-sts-4aefcb Bot and others added 2 commits October 5, 2026 09:24
Co-authored-by: dd-octo-sts-019303[bot] <256648753+dd-octo-sts-019303[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts-019303[bot] <256648753+dd-octo-sts-019303[bot]@users.noreply.github.com>
@dd-octo-sts-4aefcb
dd-octo-sts-4aefcb Bot force-pushed the engraver-auto-version-upgrade/minorpatch/go/e2e/0-1790583251 branch from af35a90 to e253a53 Compare October 5, 2026 09:24

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants