Skip to content

[29.x backport] vendor: github.com/go-jose/go-jose/v4 v4.1.6 (security) - #7457

Merged
vvoland merged 2 commits into
docker:29.xfrom
thaJeztah:29.x_backport_bump_jose
Nov 3, 2026
Merged

vvoland merged 2 commits into
docker:29.xfrom
thaJeztah:29.x_backport_bump_jose

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

backport:

vendor: github.com/go-jose/go-jose/v4 v4.1.6

full diff: go-jose/go-jose@v4.1.5...v4.1.6

Release notes (optional)

A picture of a cute animal (not mandatory but encouraged)

full diff: fvbommel/sortorder@v1.2.0...v1.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 1600418)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
- contains a fix for CVE-2026-116587 / [GHSA-mgcc-cww5-fp2q]

full diff: go-jose/go-jose@v4.1.5...v4.1.6

[GHSA-mgcc-cww5-fp2q]: GHSA-mgcc-cww5-fp2q

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit ccccec7)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

@thaJeztah thaJeztah self-assigned this Nov 3, 2026
@thaJeztah
thaJeztah requested a review from vvoland November 3, 2026 11:00

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

@thaJeztah
thaJeztah marked this pull request as ready for review November 3, 2026 13:22
@vvoland
vvoland merged commit d9bbcfc into docker:29.x Nov 3, 2026
110 of 112 checks passed

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

@thaJeztah
thaJeztah deleted the 29.x_backport_bump_jose branch November 3, 2026 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants