Skip to content

Conversation

@catpineapple
Copy link
Contributor

What problem does this PR solve?

Issue Number: close #xxx

Related PR: #xxx

Problem Summary:

Release note

None

Check List (For Author)

  • Test

    • Regression test
    • Unit Test
    • Manual test (add detailed scripts or steps below)
    • No need to test or manual test. Explain why:
      • This is a refactor/code format and no logic has been changed.
      • Previous test can cover this change.
      • No code files have been changed.
      • Other reason
  • Behavior changed:

    • No.
    • Yes.
  • Does this need documentation?

    • No.
    • Yes.

Check List (For Reviewer who merge this PR)

  • Confirm the release note
  • Confirm test cases
  • Confirm document
  • Add branch pick label

@catpineapple catpineapple requested a review from Copilot November 19, 2025 10:14
@catpineapple catpineapple merged commit e511317 into apache:master Nov 19, 2025
6 checks passed
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR addresses a CVE by updating the golang.org/x/oauth2 dependency from v0.23.0 to v0.27.0 and adds the Apache license header to a previously unlicensed YAML file.

  • Updated golang.org/x/oauth2 from v0.23.0 to v0.27.0 to fix a security vulnerability
  • Added Apache License header to deployment.yaml for license compliance

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
go.mod Updated golang.org/x/oauth2 dependency from v0.23.0 to v0.27.0
go.sum Added go.sum entry for oauth2 v0.27.0 (incomplete - missing hash entry)
doc/examples/disaggregated/fdb/deployment.yaml Added Apache License 2.0 header to previously unlicensed file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@catpineapple catpineapple deleted the fix-cve branch December 3, 2025 10:04
@catpineapple catpineapple mentioned this pull request Dec 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant