Skip to content

Update gRPC on Flyte V1 to fix CVEs - #7973

Merged
Sovietaced merged 1 commit into
flyteorg:masterfrom
Sovietaced:update-grpc
Sep 4, 2026
Merged

Sovietaced merged 1 commit into
flyteorg:masterfrom
Sovietaced:update-grpc

Conversation

@Sovietaced

@Sovietaced Sovietaced commented Sep 3, 2026

Copy link
Copy Markdown
Member

Why are the changes needed?

Fixes some CVEs in Flyte V1

What changes were proposed in this pull request?

Update gRPC to the latest version which is not affected.

How was this patch tested?

Existing tests

Labels

Please add one or more of the following labels to categorize your PR:

  • added: For new features.
  • changed: For changes in existing functionality.
  • deprecated: For soon-to-be-removed features.
  • removed: For features being removed.
  • fixed: For any bug fixed.
  • security: In case of vulnerabilities

This is important to improve the readability of release notes.

Setup process

Screenshots

Check all the applicable boxes

  • I updated the documentation accordingly.
  • All new and existing tests passed.
  • All commits are signed-off.

Related PRs

Stack

If you do use git town to manage PR Stacks, the stack relevant to this PR
will show below. Otherwise, you can ignore this section.

Docs link

Signed-off-by: Jason Parraga <sovietaced@gmail.com>
@github-actions github-actions Bot added the flyte label Sep 3, 2026
@Sovietaced Sovietaced added security Issues related to Security improvements dependencies Pull requests that update a dependency file labels Sep 3, 2026
@Sovietaced
Sovietaced marked this pull request as ready for review September 3, 2026 23:27
@Sovietaced Sovietaced changed the title Update gRPC on Flyte V1 Update gRPC on Flyte V1 to fix CVEs Sep 3, 2026
@codecov

codecov Bot commented Sep 3, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 0% with 22 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.29%. Comparing base (faed21b) to head (bfb271a).

Files with missing lines Patch % Lines
datacatalog/pkg/rpc/datacatalogservice/service.go 0.00% 8 Missing ⚠️
flytepropeller/events/admin_eventsink.go 0.00% 6 Missing ⚠️
flyteadmin/pkg/server/service.go 0.00% 4 Missing ⚠️
...ontroller/nodes/catalog/datacatalog/datacatalog.go 0.00% 4 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7973      +/-   ##
==========================================
+ Coverage   57.27%   57.29%   +0.01%     
==========================================
  Files         931      931              
  Lines       58313    58305       -8     
==========================================
+ Hits        33401    33406       +5     
+ Misses      21854    21842      -12     
+ Partials     3058     3057       -1     
Flag Coverage Δ
unittests-datacatalog 53.62% <0.00%> (+0.11%) ⬆️
unittests-flyteadmin 53.24% <0.00%> (+<0.01%) ⬆️
unittests-flytecopilot 48.05% <ø> (ø)
unittests-flytectl 64.11% <ø> (ø)
unittests-flyteidl 76.63% <ø> (ø)
unittests-flyteplugins 60.45% <ø> (ø)
unittests-flytepropeller 53.84% <0.00%> (+0.03%) ⬆️
unittests-flytestdlib 64.41% <ø> (+0.02%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Sovietaced
Sovietaced enabled auto-merge (squash) September 3, 2026 23:30
@Sovietaced
Sovietaced merged commit ecb5b85 into flyteorg:master Sep 4, 2026
53 of 54 checks passed
@Sovietaced
Sovietaced deleted the update-grpc branch September 4, 2026 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file flyte security Issues related to Security improvements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants