From ad3b852c89f39b5103439ad67af8216ff9724f8b Mon Sep 17 00:00:00 2001 From: Copilot <198982749+Copilot@users.noreply.github.com> Date: Fri, 11 Sep 2026 09:53:47 -0700 Subject: [PATCH 1/4] Fix Dependabot multi-ecosystem patterns (#8) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: spraveenio <58961022+spraveenio@users.noreply.github.com> --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2eddfdba..e0c786c9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,8 @@ updates: - package-ecosystem: docker directory: /tools/build-container multi-ecosystem-group: gpuagent-build-and-go + patterns: + - "*" open-pull-requests-limit: 1 labels: - dependencies @@ -14,6 +16,8 @@ updates: - package-ecosystem: gomod directory: /sw/nic/gpuagent multi-ecosystem-group: gpuagent-build-and-go + patterns: + - "*" open-pull-requests-limit: 1 labels: - dependencies From 5e26844da0d51c64e4a5ebe12017176b20f8732f Mon Sep 17 00:00:00 2001 From: Copilot <198982749+Copilot@users.noreply.github.com> Date: Fri, 11 Sep 2026 09:59:31 -0700 Subject: [PATCH 2/4] Fix Dependabot multi-ecosystem limits (#9) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: spraveenio <58961022+spraveenio@users.noreply.github.com> --- .github/dependabot.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e0c786c9..57422cbb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,13 +3,13 @@ multi-ecosystem-groups: gpuagent-build-and-go: schedule: interval: weekly + open-pull-requests-limit: 1 updates: - package-ecosystem: docker directory: /tools/build-container multi-ecosystem-group: gpuagent-build-and-go patterns: - "*" - open-pull-requests-limit: 1 labels: - dependencies - security @@ -18,7 +18,6 @@ updates: multi-ecosystem-group: gpuagent-build-and-go patterns: - "*" - open-pull-requests-limit: 1 labels: - dependencies - security From 234c2c99e37f7d595831b9b20e8189fcff9b18ad Mon Sep 17 00:00:00 2001 From: Praveen Kumar Shanmugam <58961022+spraveenio@users.noreply.github.com> Date: Fri, 11 Sep 2026 10:02:18 -0700 Subject: [PATCH 3/4] Remove Docker updates from dependabot.yml Removed Docker update configuration from Dependabot. --- .github/dependabot.yml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 57422cbb..d66f051e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,14 +5,6 @@ multi-ecosystem-groups: interval: weekly open-pull-requests-limit: 1 updates: - - package-ecosystem: docker - directory: /tools/build-container - multi-ecosystem-group: gpuagent-build-and-go - patterns: - - "*" - labels: - - dependencies - - security - package-ecosystem: gomod directory: /sw/nic/gpuagent multi-ecosystem-group: gpuagent-build-and-go From 286412a735b091629a5ea13a3469968f557b1ccb Mon Sep 17 00:00:00 2001 From: Copilot <198982749+Copilot@users.noreply.github.com> Date: Fri, 11 Sep 2026 10:32:03 -0700 Subject: [PATCH 4/4] Fix Dependabot go_modules failure and patch vulnerable gRPC version (#10) * Initial plan * fix(dependabot): remove duplicate grpc update targets Co-authored-by: spraveenio <58961022+spraveenio@users.noreply.github.com> * fix(security): bump grpc to patched v1.83.2 Co-authored-by: spraveenio <58961022+spraveenio@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: spraveenio <58961022+spraveenio@users.noreply.github.com> --- sw/nic/gpuagent/go.mod | 15 +++++---------- sw/nic/gpuagent/go.sum | 10 ++++++++++ 2 files changed, 15 insertions(+), 10 deletions(-) diff --git a/sw/nic/gpuagent/go.mod b/sw/nic/gpuagent/go.mod index eff0b466..82183938 100644 --- a/sw/nic/gpuagent/go.mod +++ b/sw/nic/gpuagent/go.mod @@ -6,7 +6,7 @@ require ( github.com/gogo/protobuf v1.3.2 github.com/satori/go.uuid v1.2.0 github.com/spf13/cobra v1.9.1 - google.golang.org/grpc v1.69.0-dev + google.golang.org/grpc v1.83.2 google.golang.org/protobuf v1.36.11 gopkg.in/yaml.v2 v2.4.0 ) @@ -14,10 +14,10 @@ require ( require ( github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/spf13/pflag v1.0.6 // indirect - golang.org/x/net v0.53.0 // indirect - golang.org/x/sys v0.46.0 // indirect - golang.org/x/text v0.38.0 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect + golang.org/x/net v0.58.0 // indirect + golang.org/x/sys v0.47.0 // indirect + golang.org/x/text v0.41.0 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect ) replace ( @@ -25,11 +25,6 @@ replace ( golang.org/x/net v0.53.0 => golang.org/x/net v0.56.0 ) -replace ( - google.golang.org/grpc v1.69.0-dev => google.golang.org/grpc v1.82.1 - google.golang.org/grpc v1.72.1 => google.golang.org/grpc v1.82.1 -) - replace golang.org/x/sys v0.39.0 => golang.org/x/sys v0.44.0 replace golang.org/x/text v0.38.0 => golang.org/x/text v0.39.0 diff --git a/sw/nic/gpuagent/go.sum b/sw/nic/gpuagent/go.sum index df18bad6..51c2fb30 100644 --- a/sw/nic/gpuagent/go.sum +++ b/sw/nic/gpuagent/go.sum @@ -49,6 +49,8 @@ golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLL golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o= golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec= +golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= +golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= @@ -57,10 +59,14 @@ golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7w golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= +golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus= golang.org/x/text v0.39.0/go.mod h1:3UwRclnC2g0TU9x8PZiyfOajCd1zaUNHF9cvqcQZ+ZM= +golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= +golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= @@ -73,8 +79,12 @@ gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4= gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E= google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 h1:RmoJA1ujG+/lRGNfUnOMfhCy5EipVMyvUE+KNbPbTlw= google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8= google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE= google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= +google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU= +google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8= google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=