From de4a44a009d91448cf93cb5ab06c8bd0115a5c34 Mon Sep 17 00:00:00 2001 From: Shay Bratslavsky Date: Wed, 15 Jul 2026 13:51:02 +0300 Subject: [PATCH] ACM-37697: CVE-2026-29181 Bump go.opentelemetry.io/otel to v1.41.0 using replace directive --- go.mod | 2 +- models/go.mod | 2 ++ models/vendor/modules.txt | 1 + 3 files changed, 4 insertions(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 425565d8b15..aa7ed1b5367 100644 --- a/go.mod +++ b/go.mod @@ -50,6 +50,7 @@ require ( github.com/nmstate/nmstate/rust/src/go/nmstate v0.0.0-20220811151154-801022633c42 github.com/onsi/ginkgo v1.16.5 github.com/onsi/gomega v1.35.1 + github.com/openshift-online/ocm-api-model/clientapi v0.0.453 github.com/openshift-online/ocm-sdk-go v0.1.499 github.com/openshift/api v0.0.0-20251119073004-138912d4ee99 github.com/openshift/assisted-image-service v0.0.0-20231023144959-c402402f52bf @@ -136,7 +137,6 @@ require ( github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect github.com/morikuni/aec v1.0.0 // indirect github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect - github.com/openshift-online/ocm-api-model/clientapi v0.0.453 // indirect github.com/openshift-online/ocm-api-model/model v0.0.453 // indirect github.com/peterbourgon/diskv v2.0.1+incompatible // indirect github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect diff --git a/models/go.mod b/models/go.mod index 31b2ee495df..4e1cce4aa5a 100644 --- a/models/go.mod +++ b/models/go.mod @@ -43,3 +43,5 @@ replace github.com/go-jose/go-jose/v4 => github.com/go-jose/go-jose/v4 v4.1.4 replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.15 replace golang.org/x/crypto => golang.org/x/crypto v0.52.0 + +replace go.opentelemetry.io/otel => go.opentelemetry.io/otel v1.41.0 diff --git a/models/vendor/modules.txt b/models/vendor/modules.txt index 8d6f4d78d11..f993d14b5c1 100644 --- a/models/vendor/modules.txt +++ b/models/vendor/modules.txt @@ -96,3 +96,4 @@ gorm.io/gorm/utils # github.com/go-jose/go-jose/v4 => github.com/go-jose/go-jose/v4 v4.1.4 # github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.15 # golang.org/x/crypto => golang.org/x/crypto v0.52.0 +# go.opentelemetry.io/otel => go.opentelemetry.io/otel v1.41.0