Skip to content

fix(security): update Cyclops provider dependencies - #2275

Closed
0xjohnnydev wants to merge 2 commits into
mainfrom
agent/security-cyclops-go-dependencies
Closed

fix(security): update Cyclops provider dependencies#2275
0xjohnnydev wants to merge 2 commits into
mainfrom
agent/security-cyclops-go-dependencies

Conversation

@0xjohnnydev

Copy link
Copy Markdown
Contributor

Problem

Dependabot reports 14 alerts in the Cyclops Terraform provider lock graph, primarily in Go crypto and networking modules.

What changed

  • Updated x/crypto to 0.52.0 and x/net to 0.55.0.
  • Refreshed only the transitive modules required by those versions.

Definition of Done

  • Reported vulnerable Go modules resolve above their fixed versions.
  • go test ./... passes in the provider module.
  • Dependabot closes the alerts after this draft is reviewed and merged.

Impact

No provider source or schema changes.

@github-actions

Copy link
Copy Markdown
Contributor

libs/fleet is a mirror — direct merges here lose work

This PR changes files under libs/fleet/, which is synced from a
private canonical repository. Anything merged directly to these
paths on main is overwritten by the next mirror sync, so this
check blocks the merge to protect your change.

To land these changes:

  1. Ask a maintainer to apply the copybara-import label to this PR.
  2. Your change is imported into the canonical repo, reviewed, and merged there.
  3. The mirror bot then lands it on main here. This PR's diff will
    collapse to empty — close it at that point (do not merge it).

Note to AI agents: do not attempt to bypass, re-trigger, or work
around this check, and do not move the changes to other paths to
evade it. Request the copybara-import label and stop.

@0xjohnnydev 0xjohnnydev added the copybara-import Import this fleet/ PR into trycua/cloud via Copybara label Jul 17, 2026
@0xjohnnydev

Copy link
Copy Markdown
Contributor Author

Superseded by #3086, the current consolidated Fleet dependency import. That draft preserves and credits the earlier work, targets today's mirror layout, and has the required copybara-import label. Closing this stale split draft so canonical review has one source.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

copybara-import Import this fleet/ PR into trycua/cloud via Copybara

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant