Skip to content

Ja/dpc 5385 resolving opt out go lambda vulnerabilities#3000

Merged
Jose-verdance merged 5 commits into
mainfrom
ja/dpc-5385-resolving-go-lambda-vulnerabilities
May 5, 2026
Merged

Ja/dpc 5385 resolving opt out go lambda vulnerabilities#3000
Jose-verdance merged 5 commits into
mainfrom
ja/dpc-5385-resolving-go-lambda-vulnerabilities

Conversation

@Jose-verdance
Copy link
Copy Markdown
Contributor

🎫 Ticket

https://jira.cms.gov/browse/DPC-5385

🛠 Changes

This change resolves opt out lambda go dependency vulnerabilities identified by Snyk. This also bumps the go version to 1.25.9.

ℹ️ Context

This is a part of a larger effort to address vulnerabilities identified by Snyk. Additional PRs will be made for additional lambdas.

🧪 Validation

Testing locally
No vulnerabilities identified by snyk test
Screenshot 2026-05-05 at 10 27 06 AM

Successfully ran make build, make test-build, make unit-test, make integration-test

Testing in test
Deploy: https://github.com/CMSgov/dpc-app/actions/runs/25380325116
Unit Tests: https://github.com/CMSgov/dpc-app/actions/runs/25381019155
Integration Tests: https://github.com/CMSgov/dpc-app/actions/runs/25381261399

Copy link
Copy Markdown
Contributor

@ashley-weaver ashley-weaver left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@MEspositoE14s MEspositoE14s left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

Copy link
Copy Markdown
Contributor

@lukey-luke lukey-luke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@Jose-verdance Jose-verdance changed the title Ja/dpc 5385 resolving go lambda vulnerabilities Ja/dpc 5385 resolving opt out go lambda vulnerabilities May 5, 2026
@Jose-verdance Jose-verdance merged commit b77c77e into main May 5, 2026
12 checks passed
@Jose-verdance Jose-verdance deleted the ja/dpc-5385-resolving-go-lambda-vulnerabilities branch May 5, 2026 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants