Update from update/networkservicemesh/sdk - #745
Merged
Conversation
…k@main PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
approved these changes
Aug 24, 2026
This was referenced Aug 24, 2026
bszirtes
pushed a commit
to networkservicemesh/sdk-sriov
that referenced
this pull request
Aug 24, 2026
…k-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/sdk-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
pushed a commit
to networkservicemesh/cmd-nse-firewall-vpp
that referenced
this pull request
Aug 24, 2026
…k-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/sdk-ovs
that referenced
this pull request
Aug 24, 2026
…k-sriov@main (#397) PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-nse-icmp-responder
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang:1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-sriov/sdk-k8s uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) during the internal/imports build step. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nsc-init
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang:1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-sriov/sdk-k8s uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) during the internal/imports build step. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-icmp-responder@main (#13710) PR link: networkservicemesh/cmd-nse-icmp-responder#674 Commit: e938335 Author: Network Service Mesh Bot Date: 2026-08-24 05:34:29 -0500 Message: - Update from update/networkservicemesh/sdk-sriov (#674) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang:1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-sriov/sdk-k8s uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) during the internal/imports build step. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-nse-icmp-responder-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nse-firewall-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nse-l7-proxy
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nsc-simple-docker
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nsc-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nse-vl3-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-nse-simple-vl3-docker
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
This was referenced Aug 24, 2026
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-icmp-responder-vpp@main (#13717) PR link: networkservicemesh/cmd-nse-icmp-responder-vpp#774 Commit: 2eb9e6b Author: Network Service Mesh Bot Date: 2026-08-24 05:53:31 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#774) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-firewall-vpp@main (#13719) PR link: networkservicemesh/cmd-nse-firewall-vpp#607 Commit: 17be36a Author: Network Service Mesh Bot Date: 2026-08-24 05:53:39 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#607) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-l7-proxy@main (#13718) PR link: networkservicemesh/cmd-nse-l7-proxy#279 Commit: 3b29040 Author: Network Service Mesh Bot Date: 2026-08-24 05:53:48 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#279) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-nse-vlan-vpp
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-sriov uplift), but the Dockerfile's Go toolchain was still pinned to golang:1.23.8, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.23.8; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-vlan-vpp@main (#13726) PR link: networkservicemesh/cmd-nse-vlan-vpp#618 Commit: 57c04e4 Author: Network Service Mesh Bot Date: 2026-08-24 06:11:58 -0500 Message: - Update from update/networkservicemesh/sdk-sriov (#618) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-sriov uplift), but the Dockerfile's Go toolchain was still pinned to golang:1.23.8, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.23.8; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-nse-vlan-vpp
that referenced
this pull request
Aug 24, 2026
…k-vpp@main (#619) PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-vlan-vpp@main (#13727) PR link: networkservicemesh/cmd-nse-vlan-vpp#619 Commit: ce74c5d Author: Network Service Mesh Bot Date: 2026-08-24 06:16:17 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main (#619) PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-nsc
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-sriov uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nsc@main (#13728) PR link: networkservicemesh/cmd-nsc#706 Commit: 8544dc0 Author: Network Service Mesh Bot Date: 2026-08-24 06:33:43 -0500 Message: - Update from update/networkservicemesh/sdk-sriov (#706) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-sriov uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
added a commit
to networkservicemesh/cmd-forwarder-sriov
that referenced
this pull request
Aug 24, 2026
…k-sriov@main (#885) PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
bszirtes
added a commit
to networkservicemesh/cmd-forwarder-ovs
that referenced
this pull request
Aug 24, 2026
* Update go.mod and go.sum to latest version from networkservicemesh/sdk-ovs@main PR link: networkservicemesh/sdk-ovs#397 Commit: 7ade2b7 Author: Network Service Mesh Bot Date: 2026-08-24 05:05:41 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main (#397) PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-ovs uplift), but the Dockerfile's build stage was still pinned to golang:1.24. Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io> Co-authored-by: Botond Szirtes <botond.szirtes@est.tech>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-forwarder-sriov@main (#13731) PR link: networkservicemesh/cmd-forwarder-sriov#885 Commit: 20fb6a0 Author: Network Service Mesh Bot Date: 2026-08-24 06:41:16 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main (#885) PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot
added a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-forwarder-ovs@main (#13732) PR link: networkservicemesh/cmd-forwarder-ovs#516 Commit: ab68902 Author: Network Service Mesh Bot Date: 2026-08-24 06:42:36 -0500 Message: - Update from update/networkservicemesh/sdk-ovs (#516) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-ovs@main PR link: networkservicemesh/sdk-ovs#397 Commit: 7ade2b7 Author: Network Service Mesh Bot Date: 2026-08-24 05:05:41 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main (#397) PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk-ovs uplift), but the Dockerfile's build stage was still pinned to golang:1.24. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nsc-init@main (#13712) PR link: networkservicemesh/cmd-nsc-init#837 Commit: 0604fed Author: Network Service Mesh Bot Date: 2026-08-24 05:34:53 -0500 Message: - Update from update/networkservicemesh/sdk-sriov (#837) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-sriov@main PR link: networkservicemesh/sdk-sriov#674 Commit: f70b6c9 Author: Network Service Mesh Bot Date: 2026-08-24 04:55:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main (#674) PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Bump Dockerfile base image to golang:1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-sriov/sdk-k8s uplift), but the Dockerfile's build stage was still pinned to golang:1.24, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.24.13; GOTOOLCHAIN=local) during the internal/imports build step. --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nsc-simple-docker@main (#13720) PR link: networkservicemesh/cmd-nsc-simple-docker#322 Commit: 1cad512 Author: Network Service Mesh Bot Date: 2026-08-24 05:54:03 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#322) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nsc-vpp@main (#13722) PR link: networkservicemesh/cmd-nsc-vpp#790 Commit: 29853eb Author: Network Service Mesh Bot Date: 2026-08-24 05:54:21 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#790) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-vl3-vpp@main (#13723) PR link: networkservicemesh/cmd-nse-vl3-vpp#433 Commit: 2dbbd9d Author: Network Service Mesh Bot Date: 2026-08-24 05:54:34 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#433) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
bszirtes
pushed a commit
to networkservicemesh/deployments-k8s
that referenced
this pull request
Aug 24, 2026
…d-nse-simple-vl3-docker@main (#13724) PR link: networkservicemesh/cmd-nse-simple-vl3-docker#336 Commit: f6970e6 Author: Network Service Mesh Bot Date: 2026-08-24 05:54:43 -0500 Message: - Update from update/networkservicemesh/sdk-vpp (#336) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-vpp@main PR link: networkservicemesh/sdk-vpp#922 Commit: 56e65ab Author: Network Service Mesh Bot Date: 2026-08-24 05:00:28 -0500 Message: - Update from update/networkservicemesh/sdk-kernel (#922) * Update go.mod and go.sum to latest version from networkservicemesh/sdk-kernel@main PR link: networkservicemesh/sdk-kernel#745 Commit: eac4345 Author: Network Service Mesh Bot Date: 2026-08-24 04:02:42 -0500 Message: - Update go.mod and go.sum to latest version from networkservicemesh/sdk@main (#745) PR link: networkservicemesh/sdk#1757 Commit: ee8eec4 Author: Network Service Mesh Bot Date: 2026-08-24 03:47:12 -0500 Message: - Update from update/networkservicemesh/api (#1757) * Update go.mod and go.sum to latest version from networkservicemesh/api@main PR link: https://github.com/networkservicemesh/api/pull/ Commit: 7ccb73c Author: Botond Szirtes Date: 2026-08-24 10:11:05 +0200 Message: - Fix update-dependent-repositories-gomod toolchain pin (#203) The bot workflow that updates sdk after a merge to main was pinned to go-version 1.23.3, which fails now that grpc v1.82.1 (merged in #202) requires go >= 1.25.0: go: go.mod requires go >= 1.24.0 (running go 1.23.3; GOTOOLCHAIN=local) Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so future go directive bumps in dependent repos don't hard-fail the same way; Go will auto-download whatever toolchain the target module actually requires instead of refusing to proceed. * Fix code-cov job toolchain pin for go 1.25 requirement sdk's go.mod now requires go >= 1.25.0 (pulled in transitively via the api/grpc uplift). The code-cov job's actions/setup-go was still pinned to 1.23.1, which caused 'go: no such tool "covdata"' errors across many packages during 'go test -race ./...' and an eventual cancelled run, since the older toolchain can't correctly build/instrument packages requiring a newer go directive. Bump the pin to 1.25.0 to match. Verified locally that coverage collection runs clean with a >=1.25 toolchain. --------- * Uplift github.com/cilium/ebpf to resolve CVE-2026-10722 github.com/cilium/ebpf v0.10.0 -> v0.22.0 (CVE-2026-10722). go mod tidy also picked up github.com/sirupsen/logrus v1.9.3 -> v1.9.4 as an incidental transitive resolution. Verified: go build ./..., go vet ./..., go test ./... all pass. --------- * Bump Dockerfile base image to golang 1.25 go.mod now requires go >= 1.25.0 (inherited transitively via the sdk/sdk-k8s/sdk-kernel/sdk-vpp uplift), but the Dockerfile's Go toolchain was still pinned to an older version, which would fail with: go: go.mod requires go >= 1.25.0 (running go 1.2X.Y; GOTOOLCHAIN=local) --------- Signed-off-by: NSMBot <nsmbot@networkservicmesh.io> Signed-off-by: Botond Szirtes <botond.szirtes@est.tech> Co-authored-by: NSMBot <nsmbot@networkservicmesh.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update go.mod and go.sum to latest version from networkservicemesh/sdk@main PR link: networkservicemesh/sdk#1757
Commit: fccaf89
Author: NSMBot
Date: Mon Aug 24 08:47:53 2026 +0000