From bd924e994441d8e4f18e0dd4624d4bf01a285eb9 Mon Sep 17 00:00:00 2001 From: tiffanny29631 Date: Wed, 28 Oct 2026 19:41:40 +0000 Subject: [PATCH] chore: bump otelcontribcol to v0.159.0-gke.9 - otelcontribcol v0.159.0-gke.6 -> v0.159.0-gke.9: built with Go 1.26.10 (was 1.26.0), golang.org/x/net v0.62.0 and github.com/go-jose/go-jose/v4 v4.1.6. Fixes the Go part of CVE-2026-111943, CVE-2026-116587 (go-jose), and GO-2026-6860 / GO-2026-6866 (x/net) in the otelcontribcol image. Verified: vuln-gate against v0.159.0-gke.6 passes with 0 fixable findings; govulncheck on /otelcontribcol finds nothing fixable. Bug: b/576935996 --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 89ef41a7a9..257cc91a7c 100644 --- a/Makefile +++ b/Makefile @@ -100,7 +100,7 @@ GIT_SYNC_IMAGE_NAME := gcr.io/config-management-release/git-sync:$(GIT_SYNC_VERS # To automatically update, run this command: # UPDATE_TYPE= make update-otelcontribcol-image -OTELCONTRIBCOL_VERSION := v0.159.0-gke.6 +OTELCONTRIBCOL_VERSION := v0.159.0-gke.9 OTELCONTRIBCOL_IMAGE_NAME := gcr.io/config-management-release/otelcontribcol:$(OTELCONTRIBCOL_VERSION) # Directory used for staging Docker contexts.