[Snyk] Security upgrade golang from 1.12.4-alpine to 1.25.4-alpine#46
[Snyk] Security upgrade golang from 1.12.4-alpine to 1.25.4-alpine#46RealTschoegl wants to merge 3 commits intomasterfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089231
Upgrade hydra e2e Docker build to Go 1.25.4-alpine to address Snyk security alertUpdate the base image in 📍Where to StartStart with the base image change in Dockerfile-e2e. Macroscope summarized b84adb1. |
|
Please mark whether you used AI to assist coding in this PR
|
There was a problem hiding this comment.
✨ PR Review
LGTM
Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Review using Guidelines Learn how
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089231
ApprovabilityVerdict: Approved This is a straightforward security upgrade of the Golang base image in an e2e test Dockerfile. The change is minimal (single line version bump), doesn't affect production code, and carries very low risk. No code changes detected at You can customize Macroscope's approvability policy. Learn more. |
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-588029 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-458529 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089231
Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
hydra/Dockerfile-e2eWe recommend upgrading to
golang:1.25.4-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Vulnerabilities that will be fixed with an upgrade:
SNYK-ALPINE39-OPENSSL-588029
SNYK-ALPINE39-OPENSSL-588029
SNYK-ALPINE39-MUSL-458529
SNYK-ALPINE39-MUSL-458529
SNYK-ALPINE39-OPENSSL-1089231
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 NULL Pointer Dereference