All pull requests

Pull requests

• OCPBUGS-130913: fix for path traversal or arbitrary file write in operator catalog image extraction

  backport-risk-assessedjira/severity-moderatejira/valid-bugjira/valid-referencelgtm
  #1598·rhdmalone opened Oct 20, 2026·1 task·

  ·
  10

  

• OCPBUGS-130909: v1 accept catalog root entries and relative symlink targets

  backport-risk-assessedjira/severity-moderatejira/valid-bugjira/valid-referencelgtm
  #1597·rhdmalone opened Oct 20, 2026·1 task·

  ·
  10

  

• WIP CLID-744: Add integration test coverage for commands, cache settings, and workspaces

  approveddo-not-merge/work-in-progressjira/valid-reference
  #1596·adolfo-ab opened Oct 20, 2026Contributor·6 tasks·

  ·
  7

• Make v2 unit tests pass on macOS

  needs-ok-to-test
  #1594·ammachado opened Oct 19, 2026·1 task done·

  ·
  4

• Bump the go_modules group across 2 directories with 4 updates

  dependenciesgo
  #1592·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  5

• Bump the oc-mirror-v2-security-updates group across 1 directory with 3 updates

  dependenciesgo
  #1591·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  5

• Bump github.com/moby/sys/user from 0.3.0 to 0.4.1 in /v1 in the oc-mirror-v1-security-updates group across 1 directory

  dependenciesgoneeds-ok-to-test
  #1590·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  3

• OCPBUGS-127505: do not panic when REGISTRY_AUTH_FILE is set

  do-not-merge/holdjira/severity-importantjira/valid-bugjira/valid-referenceneeds-ok-to-test
  #1589·Pratik-Redhat-Tech opened Oct 16, 2026·1 task done·

  ·
  10

• WIP: CLID-742: Skip operator operands with no matching platform

  approveddo-not-merge/work-in-progressjira/valid-reference
  #1586·aguidirh opened Oct 14, 2026Contributor·2 tasks done·

  ·
  35

• [release-5.0] OCPBUGS-130442: Address CVE-2026-78662

  do-not-merge/holdjira/invalid-bugjira/severity-moderatejira/valid-referenceneeds-ok-to-test
  #1584·ocp-sustaining-admins opened Oct 11, 2026·

  ·
  7

• [release-5.0] OCPBUGS-130425 OCPBUGS-131583: Address CVE-2026-56855

  backport-risk-assesseddo-not-merge/holdjira/invalid-bugjira/severity-moderatejira/valid-referenceneeds-ok-to-test
  #1583·ocp-sustaining-admins opened Oct 11, 2026·

  ·
  11

• OCPBUGS-129496: include Helm hook templates when collecting images

  jira/valid-bugjira/valid-referenceok-to-test
  #1580·Pratik-Redhat-Tech opened Oct 7, 2026·7 of 8 tasks·

  ·
  10

• OCPBUGS-129492: copy cosign .sig attachments verbatim

  jira/valid-bugjira/valid-referenceok-to-test
  #1579·Pratik-Redhat-Tech opened Oct 7, 2026·7 of 8 tasks·

  ·
  12

• OCPBUGS-128843: handle Helm temp-file errors

  jira/invalid-bugjira/valid-reference
  #1567·chdeshpa-hue opened Oct 1, 2026Contributor·

  ·
  8

• OCPBUGS-128842: honor graph download context and status

  jira/invalid-bugjira/valid-reference
  #1566·chdeshpa-hue opened Oct 1, 2026Contributor·

  ·
  5

• OCPBUGS-128840: handle canceled batch results

  jira/invalid-bugjira/valid-reference
  #1565·chdeshpa-hue opened Oct 1, 2026Contributor·

  ·
  5

• OCPBUGS-128841: propagate cancellation to active copies

  jira/invalid-bugjira/valid-reference
  #1564·chdeshpa-hue opened Oct 1, 2026Contributor·

  ·
  6

• pkg/image: extract parseImageSpec from ParseRef

  approvedneeds-ok-to-test
  #1562·tom-stockwell opened Sep 29, 2026·1 task done·

  ·
  11

  

• OCPBUGS-128073: honor --max-nested-paths in delete --generate

  jira/valid-bugjira/valid-referenceneeds-ok-to-test
  #1557·muhammedaslamvk opened Sep 25, 2026·1 task done·

  ·
  9

• OCPBUGS-100297: retry when registry closes idle blob upload

  approvedjira/valid-bugjira/valid-referencelgtmok-to-test
  #1556·Pratik-Redhat-Tech opened Sep 24, 2026·7 of 9 tasks·

  ·
  16

  

• OCPBUGS-103791: Use patched x/net fork v0.50.0-sec.4

  jira/severity-importantjira/valid-bugjira/valid-referenceneeds-rebase
  #1554·prabhapa opened Sep 24, 2026·

  ·
  9

• OCPBUGS-127439: v2 reject invalid --max-nested-paths like v1

  approvedjira/severity-lowjira/valid-bugjira/valid-referencelgtmneeds-ok-to-test
  #1553·muhammedaslamvk opened Sep 24, 2026·1 task done·

  ·
  12

  

• OCPBUGS-103573: Use patched x/net fork v0.43.0-sec.4

  jira/invalid-bugjira/severity-importantjira/valid-reference
  #1552·prabhapa opened Sep 24, 2026·

  ·
  8

• OCPBUGS-103136: Use patched x/net fork v0.35.0-sec.4

  jira/invalid-bugjira/severity-importantjira/valid-reference
  #1551·prabhapa opened Sep 24, 2026·

  ·
  5

• OCPBUGS-102909: Use patched x/net fork v0.35.0-sec.4

  jira/invalid-bugjira/severity-importantjira/valid-reference
  #1550·prabhapa opened Sep 24, 2026·

  ·
  5