This is an automated email from the ASF dual-hosted git repository.
HuangTing-Yao pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-core.git
The following commit(s) were added to refs/heads/master by this push:
new 2577453c [YUNIKORN-3435] Upgrade go dependencies for CVEs (#1140)
2577453c is described below
commit 2577453c1aed9fce3c023b5ed3b6fd80ac0b24e3
Author: PoiBlackTea <[email protected]>
AuthorDate: Thu Sep 3 22:27:29 2026 +0800
[YUNIKORN-3435] Upgrade go dependencies for CVEs (#1140)
[YUNIKORN-3435] Update scheduler-interface and upgrade x/crypto to v0.56.0
Closes: #1140
Signed-off-by: HuangTing-Yao <[email protected]>
---
go.mod | 17 +++++------------
go.sum | 20 ++++++++++----------
2 files changed, 15 insertions(+), 22 deletions(-)
diff --git a/go.mod b/go.mod
index bd84f99f..616adb79 100644
--- a/go.mod
+++ b/go.mod
@@ -19,10 +19,10 @@
module github.com/apache/yunikorn-core
-go 1.25.0
+go 1.26.0
require (
- github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260727104803-9a5c60e5c879
+ github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260902114836-aee56d9f5e48
github.com/go-ldap/ldap/v3 v3.4.14
github.com/google/go-cmp v0.7.0
github.com/google/uuid v1.6.0
@@ -51,17 +51,10 @@ require (
github.com/petermattis/goid v0.0.0-20260725062400-500c67a39b75 //
indirect
github.com/prometheus/procfs v0.21.1 // indirect
go.uber.org/multierr v1.11.0 // indirect
- golang.org/x/crypto v0.54.0 // indirect
- golang.org/x/net v0.57.0 // indirect
+ golang.org/x/crypto v0.56.0 // indirect
+ golang.org/x/net v0.58.0 // indirect
golang.org/x/sys v0.47.0 // indirect
- golang.org/x/text v0.40.0 // indirect
+ golang.org/x/text v0.41.0 // indirect
google.golang.org/genproto/googleapis/rpc
v0.0.0-20260803160001-6ac0973c030d // indirect
google.golang.org/protobuf v1.36.11 // indirect
)
-
-replace (
- golang.org/x/crypto => golang.org/x/crypto v0.52.0
- golang.org/x/net => golang.org/x/net v0.55.0
- golang.org/x/sys => golang.org/x/sys v0.45.0
- golang.org/x/text => golang.org/x/text v0.37.0
-)
diff --git a/go.sum b/go.sum
index 65a9cca4..2eab35f9 100644
--- a/go.sum
+++ b/go.sum
@@ -2,8 +2,8 @@ github.com/Azure/go-ntlmssp v0.1.1
h1:l+FM/EEMb0U9QZE7mKNEDw5Mu3mFiaa2GKOoTSsNDP
github.com/Azure/go-ntlmssp v0.1.1/go.mod
h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=
github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e
h1:4dAU9FXIyQktpoUAgOJK3OTFc/xug0PCXYCqU0FgDKI=
github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e/go.mod
h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=
-github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260727104803-9a5c60e5c879
h1:uNpBybWm0opxgMyDs+vh9JNpDSHbZ9o9aKmKQw17JVw=
-github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260727104803-9a5c60e5c879/go.mod
h1:qb739Bdm82PH7gsfEYabulGF90xKGNQ1hWmf197rDfw=
+github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260902114836-aee56d9f5e48
h1:l0aoGpXocwRihoXoUgeyi3gu4BbcAeKa0IIxcbseZXA=
+github.com/apache/yunikorn-scheduler-interface
v0.0.0-20260902114836-aee56d9f5e48/go.mod
h1:eF8OKdrML/PjpazkpA71nPK1BK8kxvMAi5R+YmwheFg=
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
github.com/beorn7/perks v1.0.1/go.mod
h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
github.com/cespare/xxhash/v2 v2.3.0
h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
@@ -89,16 +89,16 @@ go.yaml.in/yaml/v2 v2.4.4
h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
go.yaml.in/yaml/v2 v2.4.4/go.mod
h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
go.yaml.in/yaml/v3 v3.0.5/go.mod
h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
-golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988=
-golang.org/x/crypto v0.52.0/go.mod
h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc=
+golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y=
+golang.org/x/crypto v0.56.0/go.mod
h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I=
golang.org/x/exp v0.0.0-20260727155853-b88d891fe743
h1:ex206bKw+v3K0dm3andkrIF+ijyQKJG1pLgwQ2PYdQM=
golang.org/x/exp v0.0.0-20260727155853-b88d891fe743/go.mod
h1:EdfpwwqSu+0Li0mzskwHU6FWDV3t9Q+RZDo3QMUtL3Q=
-golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
-golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
-golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
-golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
-golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
-golang.org/x/text v0.37.0/go.mod
h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
+golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
+golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
+golang.org/x/text v0.41.0/go.mod
h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
golang.org/x/time v0.15.0/go.mod
h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
