Skip to content

fix: switch runtime base to distroless static-debian13 and bump go to 1.26.10 [release-0.7] - #273

Merged
ulucinar merged 1 commit into
crossplane-contrib:release-0.7from
erhancagirici:backport-release-0.7-distroless-debian13
Oct 23, 2026
Merged

ulucinar merged 1 commit into
crossplane-contrib:release-0.7from
erhancagirici:backport-release-0.7-distroless-debian13

Conversation

@erhancagirici

Copy link
Copy Markdown
Contributor

Description of your changes

  • Bump base image to gcr.io/distroless/static-debian13 as static-debian12 is EOL.
    • updates CA certificates
  • Bump go1.26.10

Addresses CVE-2026-111943

I have:

…to 1.26.10

Signed-off-by: Erhan Cagirici <erhan@upbound.io>

@ulucinar ulucinar left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @erhancagirici, lgtm.

@ulucinar
ulucinar merged commit 6a186d6 into crossplane-contrib:release-0.7 Oct 23, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants