Skip to content

fix: [FL-30126] Upgrade grpc v1.81.1 to v1.82.1 - #103

Merged
josue merged 1 commit into
mainfrom
fix/vuln-remediation-2026-07-24
Jul 27, 2026
Merged

fix: [FL-30126] Upgrade grpc v1.81.1 to v1.82.1#103
josue merged 1 commit into
mainfrom
fix/vuln-remediation-2026-07-24

Conversation

@josue

@josue josue commented Jul 24, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Upgrade google.golang.org/grpc v1.81.1 → v1.82.1 (fixes incorrect authorization x4)

Accepted Risk

  • OTel CVE-2026-41178 — Snyk false positive, go.opentelemetry.io/otel is not in go.mod or go.sum
  • 4x hashicorp MPL-2.0 licenses — pre-existing .snyk policy handles these

Validation

  • go build ./... clean
  • go vet ./... clean

Ticket

FL-30126

@josue
josue requested a review from caseyh as a code owner July 24, 2026 17:22
Copilot AI review requested due to automatic review settings July 24, 2026 17:22
@flume-bot

flume-bot commented Jul 24, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Go module dependencies to pick up the latest google.golang.org/grpc patch release, aligning with the stated goal of correcting authorization behavior via the upstream upgrade.

Changes:

  • Bump google.golang.org/grpc from v1.81.1 to v1.82.1 (indirect).
  • Update the related google.golang.org/genproto/googleapis/rpc pseudo-version in go.mod/go.sum.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
go.mod Updates indirect grpc and related genproto dependency versions.
go.sum Refreshes module checksums to match the upgraded grpc/genproto versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@josue
josue merged commit 9ba1fce into main Jul 27, 2026
9 checks passed
@josue
josue deleted the fix/vuln-remediation-2026-07-24 branch July 27, 2026 21:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants