Automated cherry pick of #1270: Update grpc to v1.79.3 to fix CVE-2026-33186 #1272: Fix Grype CVEs: update logrus and prometheus/prometheus#1275

Merged

k8s-ci-robot merged 8 commits intokubernetes:release-0.8from

hakman:automated-cherry-pick-of-#1270-#1272-upstream-release-0.8

May 7, 2026

Commits on May 4, 2026

Update grpc to v1.79.3 to fix CVE-2026-33186

ajaysundark
authored and
hakman
committed
Run go mod tidy in test directory to fix e2e build

ajaysundark
authored and
hakman
committed
Align otel dependency with k8s v1.41.0

ajaysundark
authored and
hakman
committed
Fix Grype CVEs: update logrus and prometheus/prometheus

BrunoChauvet
authored and
hakman
committed
Update builder image to golang:1.25.9-bookworm

BrunoChauvet
authored and
hakman
committed
fix: pin actions to commit SHA
hakman
committed
Update golangci-lint to v2.11.4
hakman
committed
Run go mod tidy and adapt to prometheus/common v0.67 API
hakman
committed