mirror of
https://github.com/1Panel-dev/1Panel.git
synced 2026-10-09 16:00:29 +00:00
Update pending Go and frontend dependencies, including gRPC, OpenTelemetry and SVGO security fixes. Raise the minimum Go version to 1.26.6 and update x/image and x/mod to patched versions. Use moby/go-archive directly for image build contexts so its vulnerable v0.1.0 replacement can be removed and v0.3.0 used. Regenerate Go module checksums with go mod tidy and refresh the npm lockfile. Validation: Linux amd64 builds, existing Go tests and go mod verify pass for core and agent; frontend production build passes; npm audit reports zero vulnerabilities. Frontend type-check reports the same nine errors with the original and updated lockfiles. Go scanning still flags two advisories in the legacy Docker SDK, which has no patched release on its current module path. A separate SDK migration and host Docker daemon updates remain necessary.