Files
tailscale/flakehashes.json
Tom Proctor 594d5bb04e go.mod,cmd/k8s-operator: bump helm dependency
Our transitive dependency on github.com/containerd/containerd and
x/crypto/openpgp was causing govulncheck failures. Bumping helm resolves
our only dependency graph routes to those packages. However, it also
bumps sigs.k8s.io/controller-runtime to v0.24.1 which included stricter
vet checks for Eventf, so this PR also fixes up instances where we call
that method without a format string arg.

Resolves the following advisories; GO-2026-5932, GO-2026-5758,
GO-2026-5475, GO-2026-5378, GO-2026-5622, GO-2026-5338, GO-2026-5064.

Updates tailscale/corp#9497

Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
2026-08-19 15:08:01 +01:00

11 lines
300 B
JSON

{
"toolchain": {
"rev": "7275f792d406d3c386cc807937a45a4a7b699d42",
"sri": "sha256-X5BJTH4gdjaww4wQZUQ8b2Yy0xztHYVPzsg/YXfmCPs="
},
"vendor": {
"goModSum": "sha256-2QCDLoT7yAk4y3yJIM8CNdMSRVyolivLODhC20rHaJg=",
"sri": "sha256-VzrPE9vNDJUNLGZO5ZCrHaEFwZsouhtbpg9rH+WEQ/A="
}
}