Skip to content

ROX-33879: update OCM SDK dep#19738

Open
rhybrillou wants to merge 2 commits intorelease-4.9from
yann/release-4.9/bump-ocm-sdk-0.1.499
Open

ROX-33879: update OCM SDK dep#19738
rhybrillou wants to merge 2 commits intorelease-4.9from
yann/release-4.9/bump-ocm-sdk-0.1.499

Conversation

@rhybrillou
Copy link
Copy Markdown
Contributor

Description

The OCM golang SDK used to depend on an old version of pgx, which in turn pulled the vulnerable pgproto3.
A recent release of the OCM SDK got rid of that dependency. This change updates the project dependency to use that recent SDK release.

This also addresses ROX-33880 , ROX-33881 , and ROX-33882 .

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

The existing CI should cover the impacted functionalities.

How I validated my change

CI run.

@rhybrillou rhybrillou requested a review from a team as a code owner April 1, 2026 09:24
@github-actions github-actions bot added the backport PR to backport changes from master to release branch label Apr 1, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Apr 1, 2026

@rhybrillou: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/ocp-4-21-nongroovy-e2e-tests 40ee4b8 link false /test ocp-4-21-nongroovy-e2e-tests
ci/prow/gke-nongroovy-compatibility-tests 40ee4b8 link false /test gke-nongroovy-compatibility-tests
ci/prow/gke-qa-e2e-tests 40ee4b8 link false /test gke-qa-e2e-tests
ci/prow/ocp-4-12-nongroovy-e2e-tests 40ee4b8 link false /test ocp-4-12-nongroovy-e2e-tests
ci/prow/ocp-next-candidate-nongroovy-e2e-tests 40ee4b8 link false /test ocp-next-candidate-nongroovy-e2e-tests
ci/prow/ocp-dev-preview-nongroovy-e2e-tests 40ee4b8 link false /test ocp-dev-preview-nongroovy-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@rhacs-bot
Copy link
Copy Markdown
Contributor

Images are ready for the commit at 5b6cb47.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.9.5-rc.2-2-g5b6cb47cc5.

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.87%. Comparing base (48fb384) to head (5b6cb47).

Additional details and impacted files
@@               Coverage Diff               @@
##           release-4.9   #19738      +/-   ##
===============================================
- Coverage        48.87%   48.87%   -0.01%     
===============================================
  Files             2719     2719              
  Lines           202912   202912              
===============================================
- Hits             99182    99177       -5     
- Misses           95961    95966       +5     
  Partials          7769     7769              
Flag Coverage Δ
go-unit-tests 48.87% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

/konflux-retest operator-bundle-on-push

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport PR to backport changes from master to release branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants