CSPL-4153: Update dependencies and restore helm chart 3.0.0#1831
Open
gabrielm-splunk wants to merge 4 commits intomainfrom
Open
CSPL-4153: Update dependencies and restore helm chart 3.0.0#1831gabrielm-splunk wants to merge 4 commits intomainfrom
gabrielm-splunk wants to merge 4 commits intomainfrom
Conversation
2 tasks
rlieberman-splunk
approved these changes
Apr 10, 2026
vivekr-splunk
requested changes
Apr 10, 2026
Collaborator
vivekr-splunk
left a comment
vivekr-splunk
left a comment
There was a problem hiding this comment.
I found one blocking issue in the restored Helm repo metadata.
gabrielm-splunk
force-pushed
the
cspl-4153-dependencies-helm-only
branch
from
3f5bd39 to
6fad020
Compare
kasiakoziol
approved these changes
Apr 21, 2026
Collaborator
Author
Helm Chart Corruption Fix AppliedI've applied the same fixes from PR #1863 to this PR to address the corrupted Changes Made
Validation Results✅ All checks pass:
CI WorkflowThe new validation workflow will run on this PR and validate:
This ensures the corrupted tgz issue that caused the helm test failures is fixed and won't happen again. Related
|
- Update google.golang.org/grpc from v1.78.0 to v1.79.3 (VULN-67797) - Update github.com/buger/jsonparser from v1.1.1 to v1.1.2 (VULN-67794) - Update Go stdlib from 1.25.7 to 1.25.8 (VULN-65734) - Update gnutls via explicit microdnf update (VULN-69140) - Update other dependencies to latest compatible versions Fixes: VULN-67797, VULN-67794, VULN-65734, VULN-69140 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
- Update GO_VERSION in .env: 1.25.7 → 1.25.8 - Update Dockerfile.distroless FROM golang:1.25.7 → 1.25.8 Addresses review comment to update all Go version occurrences. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Gabriel Mendoza <gabrielm@splunk.com>
- Updated Dockerfile: ARG BASE_IMAGE_VERSION - Updated Makefile: comment and BASE_IMAGE_VERSION variable - Latest version pulled from registry.access.redhat.com/ubi8/ubi-minimal:8.10 Addresses review comment on PR #1809 Signed-off-by: Gabriel Mendoza <gabmendo@splunk.com>
Version 3.0.0 was inadvertently removed by automated PR (commit 1139fcf) when 3.1.0 was added. Customers reported the version missing from `helm search repo` results. Changes: - Restored correct 3.0.0 packaged chart (5.8KB) from git history (commit a3737ba) - Added 3.0.0 entries to docs/index.yaml for both splunk-enterprise and splunk-operator charts - Updated SHA256 digests to match correct tarballs File verification: - splunk-operator-3.0.0.tgz is 5.8KB (correct operator-only chart) - Contains splunk-operator/ directory structure (not splunk-enterprise/) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
gabrielm-splunk
force-pushed
the
cspl-4153-dependencies-helm-only
branch
from
75bb1b5 to
432071b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Security Updates
gRPC vulnerability fix:
google.golang.org/grpcand related dependencies to address security vulnerabilitiesBase image update:
Helm Chart 3.0.0 Repository Index Update
Version 3.0.0 was inadvertently removed from the repository index by automated PR (commit 1139fcf) when 3.1.0 was added. Customers reported the version missing from
helm search repo splunk/splunk-operator --versionsresults.Changes:
Future Work
Validation tooling (CI/CD workflow and validation script) has been saved to branch
helm-validation-tooling-futurefor a separate PR.Test plan
🤖 Generated with Claude Code