Aleksei Sviridkin 0fa1ca5f03 fix(security): bump kubevirt-csi-driver to latest deps ...

Bumps all CVE-flagged dependencies in the kubevirt-csi-driver wrapper
to their latest stable versions and adapts the local main.go to the
new upstream service.NewKubevirtCSIDriver builder API.

CVE-flagged bumps:
- google.golang.org/grpc 1.65.0 -> 1.80.0 (GHSA-p77j-4mvh-x3m3, critical)
- github.com/opencontainers/runc -> 1.4.2 (GHSA-cgrx-mc8f-2prm,
  GHSA-qw9x-cqr3-wc7r, GHSA-9493-h29p-rfm2 high, GHSA-jfvp-7x6p-h2pv
  medium)
- golang.org/x/oauth2 -> 0.36.0 (GHSA-6v2p-p543-phr9, high)
- golang.org/x/net -> 0.53.0 (GHSA-vvgc-356p-c3xw, GHSA-qxp5-gwg8-xv66
  medium)

Cascading bumps required to consume runc 1.4.2 (which removed
libcontainer/userns) and the latest x/net (which requires Go 1.25+):
- k8s.io/* replace block 0.31.4 -> 0.36.0
- kubevirt.io/csi-driver upstream pin -> 20260424143118-bee6c348c004
- go directive 1.22.0 -> 1.26.2
- builder image golang:1.22.5 -> golang:1.26

The upstream csi-driver split NewKubevirtCSIDriver into a builder
chain (WithIdentityService / WithControllerService / WithNodeService);
main.go is rewritten to call the new entry points and gate them on
the runControllerService and runNodeService flags as before.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-04-26 01:46:14 +03:00

..

apps

fix(security): bump kubevirt-csi-driver to latest deps

2026-04-26 01:46:14 +03:00

core

Prepare release v1.3.0

2026-04-22 07:28:09 +00:00

extra

Prepare release v1.3.0

2026-04-22 07:28:09 +00:00

library

[cozy-lib] Add a hexToInt helper

2026-03-19 07:29:50 +03:00

system

fix(kamaji): increase memory limits and add startup probe (#2421)

2026-04-24 23:11:53 +03:00

tests/cozy-lib-tests

refactor: replace Helm lookup with valuesFrom mechanism

2026-01-05 16:10:55 +01:00