miki3421 opened a new pull request, #154: URL: https://github.com/apache/openserverless-operator/pull/154
## Summary - update both Milvus deployment profiles from `v2.5.2` to `v2.5.27` - add a regression test that keeps the full and slim manifests on the fixed image - retain the existing Milvus NetworkPolicy and tenant authentication model This is the minimal patch-line upgrade that includes the fix for [CVE-2026-26190 / GHSA-7ppg-37fh-vcr6](https://github.com/milvus-io/milvus/security/advisories/GHSA-7ppg-37fh-vcr6). ## Verification - `python -m unittest discover -s tests`: 120 passed - baseline K3s rollout: Milvus `v2.5.27` ready - anonymous `9091` credential endpoint: HTTP 401 - anonymous `9091` expression endpoint: HTTP 403 - real Alpha action to Milvus `9091`: blocked by NetworkPolicy - Alpha and Beta validation actions: PostgreSQL, MongoDB, Redis, S3, and Milvus all PASS - temporary probe action removed after the test A companion `openserverless-task` PR updates the image catalog to the same version. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
