What's Changed [TT-18674] Bump x/net, go-jose/v4 and OpenTelemetry for CVE fixes (release-5.8.17) by @buger in #8844 [TT-18920][TT-18674] Backport release-5.8.17: migrate from go-jose v3 to v4 with v3-compatible JWKS parsing by @buger in #8857 Full Changelog: v5.8.16...v5.8.17
What's Changed [TT-18804] Bump x/net and go-jose/v4 for CVE fixes (release-5.13.5) by @buger in #8845 [TT-18920][TT-18804] Backport release-5.13.5: migrate from go-jose v3 to v4 with v3-compatible JWKS parsing by @buger in #8856 Full Changelog: v5.13.4...v5.13.5
[TT-18674] Backport release-5.8.17: migrate from go-jose v3 to v4 wit…
[TT-18804] Backport release-5.13.5: migrate from go-jose v3 to v4 wit…
[TT-18804] Bump x/net and go-jose/v4 for CVE fixes (release-5.13.5) (…
[TT-18674] Bump x/net, go-jose/v4 and OpenTelemetry for CVE fixes (re…
What's Changed [releng master] gromit: sync templates by @probelabs[bot] in #8585 TT-17795: bump golang.org/x/text and google.golang.org/grpc for CVE fixes by @edsonmichaque in #8582 TT-17795: update version of Tyk/opentelemetry with fixed CVEs by @vladzabolotnyi in #8614 TT-17641: [releng master] Add next-generation plugin compiler by @buger in #8379 TT-17509: Update s1-cns-scans.yml workflow to…
Merging to release-5.16.0: CVE-528: Bump github.com/andybalholm/brotl…
Merging to release-5.16.0: [TT-16007] get-oas-config-data-deep-copy (…
Merging to release-5.16.0: [TT-16007] get-oas-config-data-deep-copy (…
docs: update doc comments for TLS versions, detailed logs, and body t…
docs: update doc comments for TLS versions, detailed logs, and body t…
docs: update doc comments for TLS versions, detailed logs, and body t…
Merging to release-5.16.0: [TT-1860] Strip listen path can modify rew…
Merging to release-5.13.4: [TT-18609] Bump golang.org/x/net to v0.60.…
[TT-18609] Bump golang.org/x/net to v0.60.0 for CVE-2026-78659, CVE-2…
[TT-18609] Bump golang.org/x/net to v0.60.0 for CVE-2026-78659, CVE-2…
Auto-generated from gromit templates by policy sync. Co-authored-by: Gromit policy@gromit
Merging to release-5.13: [TT-18285] Bump dependencies (#8736, #8745) …
Merging to release-5.13: [TT-18285] Bump dependencies (#8736, #8745) …
Description Related Issue Motivation and Context How This Has Been Tested Screenshots (if appropriate) Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Refactoring or add test (improvements in base code or adds test coverage to functionali…
What's Changed Merging to release-5.13.2: chore: update swagger info.version to 5.13.2 (#8648) by @probelabs[bot] in #8655 [TT-17927] Restore verbose TLS and policy-id doc comments (5.13) by @olamilekan000 in #8662 [releng release-5.13.2] gromit: sync templates by @probelabs[bot] in #8692 Merging to release-5.13.2: Fix/tt 18285/bump dependencies (#8736) by @probelabs[bot] in #8741 Merging to relea…
What's Changed [releng release-5.15] gromit: sync templates by @probelabs[bot] in #8612 Merging to release-5.15: TT-17795: bump golang.org/x/text and google.golang.org/grpc for CVE fixes (#8582) by @probelabs[bot] in #8606 [releng release-5.15] gromit: sync templates by @buger in #8619 Merging to release-5.15: TT-17795: update version of TykTechnologies/opentelemetry with fixed CVEs (#8614) by @pr…
Merging to release-5.15.1: [TT-18285] Bump otlptrace exporters to v1.…
Merging to release-5.13.3: [TT-18285] Bump otlptrace exporters to v1.…
Merging to release-5.13.2: Fix/tt 18285/bump dependencies (#8736) (#8…
Fix/tt 18285/bump dependencies (#8736) Related tickets: https://tyktech.atlassian.net/browse/TT-18285 https://tyktech.atlassian.net/browse/TT-18481 What has been done? https://tyktech.atlassian.net/browse/CVE-317 -> kin-openapi from v0.133.0 to v0.149.0 https://tyktech.atlassian.net/browse/CVE-318 -> CVE-317 covers this. https://tyktech.atlassian.net/browse/CVE-330 -> golang.org/x/crypto from v0.5…
Fix/tt 18285/bump dependencies (#8736) Related tickets: https://tyktech.atlassian.net/browse/TT-18285 https://tyktech.atlassian.net/browse/TT-18481 What has been done? https://tyktech.atlassian.net/browse/CVE-317 -> kin-openapi from v0.133.0 to v0.149.0 https://tyktech.atlassian.net/browse/CVE-318 -> CVE-317 covers this. https://tyktech.atlassian.net/browse/CVE-330 -> golang.org/x/crypto from v0.5…
Merging to release-5.8.16: Fix release 5.8.15 FIPS plugin compiler (#…
TT-18305 bump dependencies (#8723) User description This PR bumps dependencies to newer versions to cover CVEs. PR Type Bug fix, Enhancement Description Bump core Go networking dependencies Upgrade gRPC and OAuth libraries Refresh OpenTelemetry dependency set Update indirect transitive dependencies Diagram Walkthrough flowchart LR mod["go.mod dependency updates"] core["Core Go modules"] grpc["gRPC…