feat(RDODCP-312): Upstream sync v1.11.3 and dependabots updates #38
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…pillora#571) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jpillora <633843+jpillora@users.noreply.github.com> Signed-off-by: samartha.pm <samartha.pm@outsystems.com>
ersion to 1.25.1 and update all dependencies (jpillora#568) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jpillora <633843+jpillora@users.noreply.github.com> Signed-off-by: samartha.pm <samartha.pm@outsystems.com>
- Remove obsolete Windows ARM32 build exclusions from goreleaser - Add GOTOOLCHAIN=auto to CI for Go version compatibility - Windows ARM32 builds work fine with modern Go versions 💖 Generated with Crush Co-Authored-By: Crush <crush@charm.land> Signed-off-by: samartha.pm <samartha.pm@outsystems.com>
and undo some AI changes 😔 Signed-off-by: samartha.pm <samartha.pm@outsystems.com>
Keep our custom goreleaser configuration instead of upstream changes to maintain our release process and build configurations. Signed-off-by: samartha.pm <samartha.pm@outsystems.com>
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) ✅ license/snyk check is complete. No issues have been found. (View Details) ✅ code/snyk check is complete. No issues have been found. (View Details) |
| "testing" | ||
|
|
||
| chclient "github.com/jpillora/chisel/client" | ||
| chserver "github.com/jpillora/chisel/server" |
There was a problem hiding this comment.
Is this testing our version of chisel or jpillora's version?
There was a problem hiding this comment.
good catch! but the tests are actually testing our OutSystems version.
We have a replace directive in go.mod that redirects all github.com/jpillora/chisel imports to use our local code instead. So even though the import paths show the upstream repo, Go automatically uses our OutSystems fork when running the tests.
bmartins-unit
approved these changes
Oct 7, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🔄 Upstream Sync v1.11.3
📋 Summary
This PR synchronizes the OutSystems Chisel fork with upstream changes and includes dependency updates.
Note: Upstream unsigned commits have been GPG-signed to ensure OutSystems compliance. Commits were cherry-picked selectively to keep the history clean instead of including all upstream commits. (Refer commit history)
🔧 Changes Made
🚀 Updates from upstream
CHISEL_KEYenvironment variable being ignored when--keyfileflag is not set (#571)🔐 Security Fix
RUN apk update && apk upgradeto resolve CVE-2025-9230 (HIGH severity)🔄 Dependency Updates
Updated the following dependencies to their latest versions:
golang.org/x/crypto→ v0.42.0 (latest)golang.org/x/net→ v0.44.0 (latest)golang.org/x/sync→ v0.17.0 (latest)golang.org/x/sys→ v0.36.0 (latest, indirect)golang.org/x/text→ v0.29.0 (latest, indirect)✅ Tests
Security Scan Results:
Local Image Grype/Trivy scan reports shown no High/critical vulnerabities.
Local connection testing using PR commit hash with Cloud-Connector:
📁 Files Changed
go.mod- Go version and dependency updatesgo.sum- Dependency checksums updatedmain.go- Environment variable handling improvementstest/e2e/env_key_test.go- New comprehensive testsREADME.md- Documentation updatesgoreleaser.yml- Retained OutSystems versionDockerfile- Added security updates (apk upgrade) to fix OpenSSL vulnerability