mug/aports
Watch
2
Fork
You've already forked aports
 0
Code Issues 1 Pull requests 7 Releases Packages 51 Activity Actions

Update dependency cloud-sql-proxy to v2.27.0 #35

Open
Renovate wants to merge 1 commit from renovate/cloud-sql-proxy-2.x into v3.24
pull from: renovate/cloud-sql-proxy-2.x
merge into: mug:v3.24
Conversation 0 Commits 1 Files changed 1 +2 -2
Renovate commented 2026-09-28 22:00:17 +00:00
Collaborator

This PR contains the following updates:

Package Update Change
cloud-sql-proxy minor 2.25.4 → 2.27.0

Release Notes

GoogleCloudPlatform/cloud-sql-proxy (cloud-sql-proxy)

v2.27.0

Compare Source

Features
  • add built-in client metrics flags and upgrade cloudsqlconn to v1.26.0 (BETA) (#​2714) (89f3c7c)

v2.26.3

Compare Source

Bug Fixes
Security / CVE Fixes

Updates gcr.io/distroless/static:nonroot and alpine:3 container base image digests to remove distrusted emSign ECC Root CA - G3 and AAA Certificate Services root certificates (ca-certificates), and rebuilds the proxy binaries with Go 1.27.3 / 1.26.10:

Advisory CVE Description Affected Component Fixed Version
GO-2026-6809 CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 and container OS root CA bundle (ca-certificates) crypto/x509 (stdlib), gcr.io/distroless/static:nonroot, alpine:3 go1.26.10 / go1.27.3, distroless@d620678, alpine:3.24.3@​71e9b7b

v2.26.2

Compare Source

Bug Fixes
  • downgrade go-fuse to v2.11.0 and add linux/386 build check (#​2704) (7f12f58)

v2.26.1

Compare Source

Bug Fixes
Security / CVE Fixes

Updates golang.org/x/net from v0.59.0 to v0.61.0, resolving the following HTTP/2 vulnerabilities:

Advisory CVE Description Affected Package Fixed Version
GO-2026-6603 CVE-2026-78659 HTTP/2 server memory exhaustion due to Trailer headers golang.org/x/net v0.61.0
GO-2026-6610 CVE-2026-78660 HTTP/2 transport accepts malformed framing-related headers golang.org/x/net v0.61.0
GO-2026-6611 CVE-2026-78669 Excessive CPU consumption from repeated initial window changes golang.org/x/net v0.61.0
GO-2026-6612 CVE-2026-78663 Double flow control refund on HTTP/2 server streams golang.org/x/net v0.61.0
GO-2026-6617 CVE-2026-97032 HTTP/2 server crash due to HPACK encoder race golang.org/x/net v0.61.0

v2.26.0

Compare Source

Bug Fixes
  • downgrade pgx to v5.10.0 (#​2687) (85ab150)
  • update all dependencies and base images (Alpine 3.24.2, distroless); require Go 1.26 (#​2681) (85d63dd)
Miscellaneous Chores

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cloud-sql-proxy](https://github.com/GoogleCloudPlatform/cloud-sql-proxy) | minor | `2.25.4` → `2.27.0` | --- ### Release Notes <details> <summary>GoogleCloudPlatform/cloud-sql-proxy (cloud-sql-proxy)</summary> ### [`v2.27.0`](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/HEAD/CHANGELOG.md#2270-2026-10-29) [Compare Source](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/compare/v2.26.3...v2.27.0) ##### Features - add built-in client metrics flags and upgrade cloudsqlconn to v1.26.0 (BETA) ([#&#8203;2714](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2714)) ([89f3c7c](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/89f3c7c445cf270eabd8d54cc7fb4afdf72d6127)) ### [`v2.26.3`](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/HEAD/CHANGELOG.md#2263-2026-10-22) [Compare Source](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/compare/v2.26.2...v2.26.3) ##### Bug Fixes - update dependencies and container base image digests ([#&#8203;2708](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2708)) ([e58f8fb](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/e58f8fb639c9806c73ec7207d3ed368751031f01)), refs [#&#8203;2707](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2707) ##### Security / CVE Fixes Updates `gcr.io/distroless/static:nonroot` and `alpine:3` container base image digests to remove distrusted `emSign ECC Root CA - G3` and `AAA Certificate Services` root certificates (`ca-certificates`), and rebuilds the proxy binaries with Go `1.27.3` / `1.26.10`: | Advisory | CVE | Description | Affected Component | Fixed Version | | ---------------------------------------------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- | ----------------------------------------------------------------------- | | [GO-2026-6809](https://pkg.go.dev/vuln/GO-2026-6809) | [CVE-2026-111943](https://nvd.nist.gov/vuln/detail/CVE-2026-111943) | Distrust compromised intermediate certificates in `crypto/x509` and container OS root CA bundle (`ca-certificates`) | `crypto/x509` (stdlib), `gcr.io/distroless/static:nonroot`, `alpine:3` | `go1.26.10` / `go1.27.3`, `distroless@d620678`, `alpine:3.24.3@&#8203;71e9b7b` | ### [`v2.26.2`](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/HEAD/CHANGELOG.md#2262-2026-10-14) [Compare Source](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/compare/v2.26.1...v2.26.2) ##### Bug Fixes - downgrade go-fuse to v2.11.0 and add linux/386 build check ([#&#8203;2704](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2704)) ([7f12f58](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/7f12f589aebd27f90f6676ffa65ca311d2bdb88c)) ### [`v2.26.1`](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/HEAD/CHANGELOG.md#2261-2026-10-14) [Compare Source](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/compare/v2.26.0...v2.26.1) ##### Bug Fixes - keep structured logs when --quiet is set ([#&#8203;2694](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2694)) ([4b77b57](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/4b77b57ce788b89ecd91d131658bcc1e0de30321)) - update all dependencies to latest ([#&#8203;2699](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2699)) ([ea92a21](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/ea92a21528d9c520dbb8d35a00681e8a07f62dd0)) - update cloud.google.com/go/cloudsqlconn to v1.25.4 ([#&#8203;2685](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2685)) ([ddf693e](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/ddf693ed2c99dfe9b8c434d331f1f960ff665581)) ##### Security / CVE Fixes Updates `golang.org/x/net` from `v0.59.0` to `v0.61.0`, resolving the following HTTP/2 vulnerabilities: | Advisory | CVE | Description | Affected Package | Fixed Version | | ---------------------------------------------------- | ----------------------------------------------------------------- | -------------------------------------------------------------- | ------------------ | ------------- | | [GO-2026-6603](https://pkg.go.dev/vuln/GO-2026-6603) | [CVE-2026-78659](https://nvd.nist.gov/vuln/detail/CVE-2026-78659) | HTTP/2 server memory exhaustion due to Trailer headers | `golang.org/x/net` | `v0.61.0` | | [GO-2026-6610](https://pkg.go.dev/vuln/GO-2026-6610) | [CVE-2026-78660](https://nvd.nist.gov/vuln/detail/CVE-2026-78660) | HTTP/2 transport accepts malformed framing-related headers | `golang.org/x/net` | `v0.61.0` | | [GO-2026-6611](https://pkg.go.dev/vuln/GO-2026-6611) | [CVE-2026-78669](https://nvd.nist.gov/vuln/detail/CVE-2026-78669) | Excessive CPU consumption from repeated initial window changes | `golang.org/x/net` | `v0.61.0` | | [GO-2026-6612](https://pkg.go.dev/vuln/GO-2026-6612) | [CVE-2026-78663](https://nvd.nist.gov/vuln/detail/CVE-2026-78663) | Double flow control refund on HTTP/2 server streams | `golang.org/x/net` | `v0.61.0` | | [GO-2026-6617](https://pkg.go.dev/vuln/GO-2026-6617) | [CVE-2026-97032](https://nvd.nist.gov/vuln/detail/CVE-2026-97032) | HTTP/2 server crash due to HPACK encoder race | `golang.org/x/net` | `v0.61.0` | ### [`v2.26.0`](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/blob/HEAD/CHANGELOG.md#2260-2026-09-28) [Compare Source](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/compare/v2.25.4...v2.26.0) ##### Bug Fixes - downgrade pgx to v5.10.0 ([#&#8203;2687](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2687)) ([85ab150](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/85ab150e8b26418922b942cfe6188aed697c7993)) - update all dependencies and base images (Alpine 3.24.2, distroless); require Go 1.26 ([#&#8203;2681](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2681)) ([85d63dd](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/85d63ddbb2aa0c2b959ffaf06102a1dbcef4e920)) ##### Miscellaneous Chores - release 2.26.0 ([#&#8203;2689](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/2689)) ([3adf01e](https://github.com/GoogleCloudPlatform/cloud-sql-proxy/commit/3adf01ea7911a9199ab676c6be4114bc9c7768d4)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE5NS4xIiwidGFyZ2V0QnJhbmNoIjoidjMuMjQiLCJsYWJlbHMiOltdfQ==-->
Update dependency cloud-sql-proxy to v2.26.0
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 1m44s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
fb664058f7
Renovate changed title from Update dependency cloud-sql-proxy to v2.26.0 to Update dependency cloud-sql-proxy to v2.26.1 2026-10-14 21:00:22 +00:00
Renovate force-pushed renovate/cloud-sql-proxy-2.x from fb664058f7
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 1m44s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
to c5e8d0b42e
All checks were successful
Main workflow / changed (pull_request) Successful in 7s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 51s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
2026-10-14 21:00:24 +00:00 Compare
Renovate changed title from Update dependency cloud-sql-proxy to v2.26.1 to Update dependency cloud-sql-proxy to v2.26.2 2026-10-14 23:00:25 +00:00
Renovate force-pushed renovate/cloud-sql-proxy-2.x from c5e8d0b42e
All checks were successful
Main workflow / changed (pull_request) Successful in 7s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 51s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
to ed3e6d05ae
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 53s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
2026-10-14 23:00:25 +00:00 Compare
Renovate force-pushed renovate/cloud-sql-proxy-2.x from ed3e6d05ae
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 53s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
to dbd7b35826
All checks were successful
Main workflow / changed (pull_request) Successful in 10s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 51s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
2026-10-22 23:00:21 +00:00 Compare
Renovate changed title from Update dependency cloud-sql-proxy to v2.26.2 to Update dependency cloud-sql-proxy to v2.26.3 2026-10-22 23:00:22 +00:00
Renovate changed title from Update dependency cloud-sql-proxy to v2.26.3 to Update dependency cloud-sql-proxy to v2.27.0 2026-10-29 22:00:26 +00:00
Renovate force-pushed renovate/cloud-sql-proxy-2.x from dbd7b35826
All checks were successful
Main workflow / changed (pull_request) Successful in 10s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 51s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
to ec6a47951d
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 55s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
2026-10-29 22:00:27 +00:00 Compare
All checks were successful
Main workflow / changed (pull_request) Successful in 3s
Details
Main workflow / build (cloud-sql-proxy) (pull_request) Successful in 55s
Details
Main workflow / cleanup (pull_request) Has been skipped
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 'renovate/cloud-sql-proxy-2.x:renovate/cloud-sql-proxy-2.x'
git switch 'renovate/cloud-sql-proxy-2.x'

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch 'v3.24'
git merge --no-ff 'renovate/cloud-sql-proxy-2.x'
git switch 'renovate/cloud-sql-proxy-2.x'
git rebase 'v3.24'
git switch 'v3.24'
git merge --ff-only 'renovate/cloud-sql-proxy-2.x'
git switch 'renovate/cloud-sql-proxy-2.x'
git rebase 'v3.24'
git switch 'v3.24'
git merge --no-ff 'renovate/cloud-sql-proxy-2.x'
git switch 'v3.24'
git merge --squash 'renovate/cloud-sql-proxy-2.x'
git switch 'v3.24'
git merge --ff-only 'renovate/cloud-sql-proxy-2.x'
git switch 'v3.24'
git merge 'renovate/cloud-sql-proxy-2.x'
git push origin 'v3.24'
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mug/aports!35
No description provided.