Skip to content

build(deps): bump github.com/coredns/coredns from 1.14.1 to 1.14.2#2099

Merged
BeryJu merged 1 commit intomainfrom
dependabot/go_modules/github.com/coredns/coredns-1.14.2
Mar 6, 2026
Merged

build(deps): bump github.com/coredns/coredns from 1.14.1 to 1.14.2#2099
BeryJu merged 1 commit intomainfrom
dependabot/go_modules/github.com/coredns/coredns-1.14.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 6, 2026

Bumps github.com/coredns/coredns from 1.14.1 to 1.14.2.

Release notes

Sourced from github.com/coredns/coredns's releases.

v1.14.2

This release adds the new proxyproto plugin to support Proxy Protocol and preserve client IPs behind load balancers. It also includes enhancements such as improved DNS logging metadata and stronger randomness for loop detection (CVE-2026-26018), along with several bug fixes including TLS+IPv6 forwarding, improved CNAME handling and rewriting, allowing jitter disabling, prevention of an ACL bypass (CVE-2026-26017), and a Kubernetes plugin crash fix. In addition, the release updates the build to Go 1.26.1, which include security fixes addressing CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-25679, and CVE-2026-27142.

Brought to You By

Adphi Henrik Gerdes hide Kelly Kane Shiv Tyagi vflaux Ville Vesilehto yangsenzk Yong Tang YOUNEVSKY

Noteworthy Changes

Commits
  • dd1df4f Update release note for upcoming 1.14.2 (#7897)
  • 8c271b8 Bump golang to 1.26.1 (#7902)
  • 51a11b3 plugin/reload: Allow disabling jitter with 0s (#7896)
  • 5d97c15 Bump version to 1.14.2 (#7895)
  • ba3b6ce build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 (#7893)
  • b760b24 build(deps): bump google.golang.org/api from 0.267.0 to 0.269.0 (#7890)
  • a012d9e build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager (#7892)
  • 465d75b build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#7885)
  • 86d9bc7 build: add grpcnotrace tag to exclude x/net/trace (#7884)
  • 442f106 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#7886)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/coredns/coredns](https://github.com/coredns/coredns) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/coredns/coredns/releases)
- [Commits](coredns/coredns@v1.14.1...v1.14.2)

---
updated-dependencies:
- dependency-name: github.com/coredns/coredns
  dependency-version: 1.14.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 6, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Mar 6, 2026

Deploy Preview for beryju-gravity canceled.

Name Link
🔨 Latest commit 4feb88d
🔍 Latest deploy log https://app.netlify.com/projects/beryju-gravity/deploys/69ab178200998d0008cdff7a

@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.69%. Comparing base (f1d6c5d) to head (4feb88d).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2099   +/-   ##
=======================================
  Coverage   69.69%   69.69%           
=======================================
  Files         136      136           
  Lines        7441     7441           
=======================================
  Hits         5186     5186           
  Misses       1721     1721           
  Partials      534      534           
Flag Coverage Δ
bench 12.34% <ø> (ø)
e2e 45.05% <ø> (ø)
unittest 56.38% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@BeryJu BeryJu merged commit c98f195 into main Mar 6, 2026
24 checks passed
@BeryJu BeryJu deleted the dependabot/go_modules/github.com/coredns/coredns-1.14.2 branch March 6, 2026 22:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant