From f572b31606252c5b1c84034a0afb1bb8b542bd33 Mon Sep 17 00:00:00 2001 From: Shay Bratslavsky Date: Wed, 15 Jul 2026 13:43:30 +0300 Subject: [PATCH] ACM-37697: CVE-2026-29181 Bump go.opentelemetry.io/otel to v1.41.0 using replace directive --- api/go.mod | 2 ++ api/vendor/modules.txt | 1 + go.mod | 2 +- 3 files changed, 4 insertions(+), 1 deletion(-) diff --git a/api/go.mod b/api/go.mod index ac4b01426e79..be8616746ee7 100644 --- a/api/go.mod +++ b/api/go.mod @@ -110,3 +110,5 @@ replace github.com/buger/jsonparser => github.com/buger/jsonparser v1.1.2 replace github.com/go-jose/go-jose/v4 => github.com/go-jose/go-jose/v4 v4.1.4 replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.15 + +replace go.opentelemetry.io/otel => go.opentelemetry.io/otel v1.41.0 diff --git a/api/vendor/modules.txt b/api/vendor/modules.txt index 9db7817506af..ff7cfcab6575 100644 --- a/api/vendor/modules.txt +++ b/api/vendor/modules.txt @@ -747,3 +747,4 @@ sigs.k8s.io/yaml/goyaml.v2 # github.com/buger/jsonparser => github.com/buger/jsonparser v1.1.2 # github.com/go-jose/go-jose/v4 => github.com/go-jose/go-jose/v4 v4.1.4 # github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.15 +# go.opentelemetry.io/otel => go.opentelemetry.io/otel v1.41.0 diff --git a/go.mod b/go.mod index 425565d8b159..aa7ed1b5367f 100644 --- a/go.mod +++ b/go.mod @@ -50,6 +50,7 @@ require ( github.com/nmstate/nmstate/rust/src/go/nmstate v0.0.0-20220811151154-801022633c42 github.com/onsi/ginkgo v1.16.5 github.com/onsi/gomega v1.35.1 + github.com/openshift-online/ocm-api-model/clientapi v0.0.453 github.com/openshift-online/ocm-sdk-go v0.1.499 github.com/openshift/api v0.0.0-20251119073004-138912d4ee99 github.com/openshift/assisted-image-service v0.0.0-20231023144959-c402402f52bf @@ -136,7 +137,6 @@ require ( github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect github.com/morikuni/aec v1.0.0 // indirect github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect - github.com/openshift-online/ocm-api-model/clientapi v0.0.453 // indirect github.com/openshift-online/ocm-api-model/model v0.0.453 // indirect github.com/peterbourgon/diskv v2.0.1+incompatible // indirect github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect