CSPL-4153: Update dependencies and restore helm chart 3.0.0#1831
Open
gabrielm-splunk wants to merge 5 commits intomainfrom
Open
CSPL-4153: Update dependencies and restore helm chart 3.0.0#1831gabrielm-splunk wants to merge 5 commits intomainfrom
gabrielm-splunk wants to merge 5 commits intomainfrom
Conversation
- Update google.golang.org/grpc from v1.78.0 to v1.79.3 (VULN-67797) - Update github.com/buger/jsonparser from v1.1.1 to v1.1.2 (VULN-67794) - Update Go stdlib from 1.25.7 to 1.25.8 (VULN-65734) - Update gnutls via explicit microdnf update (VULN-69140) - Update other dependencies to latest compatible versions Fixes: VULN-67797, VULN-67794, VULN-65734, VULN-69140 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
- Update GO_VERSION in .env: 1.25.7 → 1.25.8 - Update Dockerfile.distroless FROM golang:1.25.7 → 1.25.8 Addresses review comment to update all Go version occurrences. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
- Updated Dockerfile: ARG BASE_IMAGE_VERSION - Updated Makefile: comment and BASE_IMAGE_VERSION variable - Latest version pulled from registry.access.redhat.com/ubi8/ubi-minimal:8.10 Addresses review comment on PR #1809 Signed-off-by: Gabriel Mendoza <gabmendo@splunk.com>
Version 3.0.0 was inadvertently removed by automated PR (commit 1139fcf) when 3.1.0 was added. Customers reported the version missing from `helm search repo` results. Changes: - Restored 3.0.0 packaged chart from git tag - Added 3.0.0 entries to docs/index.yaml for both splunk-enterprise and splunk-operator charts - Chart digest: db5890e3bcc95f9ca7298873cc08b4a5d1ee86ccb4ad4e5334a0ab5d7a5fdb5e Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2 tasks
rlieberman-splunk
approved these changes
Apr 10, 2026
vivekr-splunk
requested changes
Apr 10, 2026
Collaborator
vivekr-splunk
left a comment
vivekr-splunk
left a comment
There was a problem hiding this comment.
I found one blocking issue in the restored Helm repo metadata.
| repository: file://splunk-operator/helm-chart/splunk-operator | ||
| version: 3.0.0 | ||
| description: A Helm chart for Splunk Enterprise managed by the Splunk Operator | ||
| digest: db5890e3bcc95f9ca7298873cc08b4a5d1ee86ccb4ad4e5334a0ab5d7a5fdb5e |
Collaborator
There was a problem hiding this comment.
The restored 3.0.0 index entries are not consistent with the published chart artifacts under docs/. Both new entries use digest db5890..., but docs/splunk-enterprise-3.0.0.tgz hashes to ae82f6... and docs/splunk-operator-3.0.0.tgz hashes to bd318b.... Current 3.1.0 entries match their tarballs, so this looks like the digest from the embedded dependency chart was copied into the repo index. Since Helm clients consume docs/index.yaml, I don’t think this is ready to merge until the index is regenerated from the actual published packages.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Security Updates
gRPC vulnerability fix:
google.golang.org/grpcand related dependencies to address security vulnerabilitiesBase image update:
Helm Chart 3.0.0 Restoration
Version 3.0.0 was inadvertently removed by automated PR (commit 1139fcf) when 3.1.0 was added. Customers reported the version missing from
helm search repo splunk/splunk-operator --versionsresults.Changes:
Test plan
🤖 Generated with Claude Code