Skip to content

fix: upgrade gRPC to v1.79.3 and improve plugin stability#10

Merged
jimmychiuuuu merged 7 commits intomainfrom
fix-grpc-vulnerability
Apr 13, 2026
Merged

fix: upgrade gRPC to v1.79.3 and improve plugin stability#10
jimmychiuuuu merged 7 commits intomainfrom
fix-grpc-vulnerability

Conversation

@jimmychiuuuu
Copy link
Copy Markdown
Collaborator

@jimmychiuuuu jimmychiuuuu commented Apr 9, 2026

Upgrades gRPC to resolve a security vulnerability and includes several stability fixes and testing enhancements.

Key Changes:

  • Security: Bumped google.golang.org/grpc to v1.79.3 to fix vulnerability.
  • Fixes: Resolved broken retry logic in plugin.go, optimized measurement file copying in ccdevice.go, and added context cancellation checks to prevent leaks.
  • Testing: Added a test pod manifest for vTPM (SEV) validation.
  • Status: Verified with both unit tests and multi-node pool E2E tests (All passed).

@jimmychiuuuu jimmychiuuuu changed the title Updates google.golang.org/grpc to v1.79.3 to resolve security vulnerability CVE-2026-33186. Changes: - Bumped google.golang.org/grpc from v1.58.3 to v1.79.3 in go.mod and go.sum. - Automatically updated related dependencies to their compatible versions. Bump google.golang.org/grpc to v1.79.3 to fix vulnerability Apr 9, 2026
@jimmychiuuuu jimmychiuuuu changed the title Bump google.golang.org/grpc to v1.79.3 to fix vulnerability fix: upgrade gRPC to v1.79.3 and improve plugin stability Apr 10, 2026
Comment thread deviceplugin/ccdevice.go
@jimmychiuuuu jimmychiuuuu merged commit 2d9017a into main Apr 13, 2026
4 checks passed
@jimmychiuuuu jimmychiuuuu deleted the fix-grpc-vulnerability branch April 16, 2026 00:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants