20e8dbdbb8d2e13168032cfc104c659a06c7b71d
default-request-adder / test (push) Successful in 29s
default-request-adder / vulnerabilities (push) Successful in 31s
Unbound Release / Check Preconditions (push) Successful in 1s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 9s
Unbound Release / Create Release (push) Successful in 11s
Release / release (push) Successful in 26s
default-request-adder / build (push) Successful in 19m41s
Bumps `golang.org/x/net` from v0.57.0 to v0.61.0 to fix five HTTP/2 vulnerabilities that govulncheck reports as reachable through client-go: - GO-2026-6603: HTTP/2 server memory exhaustion due to Trailer headers - GO-2026-6610: HTTP/2 transport accepts malformed framing-related headers - GO-2026-6611: Excessive CPU consumption from repeated initial window changes - GO-2026-6612: Double flow control refund on HTTP/2 server streams - GO-2026-6617: HTTP/2 server crash due to HPACK encoder race `go get` also brought in newer `x/sys`, `x/term` and `x/text`. Verified locally: `govulncheck ./...` reports no vulnerabilities, and `go test -race ./...` passes (the repo has no test files). 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01MFgbwhfAnf8tMbeKRab9AD Reviewed-on: #414
Default-request-adder
A small container which periodically (every 10s) checks for a LimitRange on all non-excluded namespaces named extreme-request-defaults and creates it using the configured memory settings if absent.