Skip to content

chore: upgrade pgx to v5.9.0 to remediate CVE-2026-33815 and CVE-2026-33816 BED-7930#2679

Merged
elikmiller merged 1 commit intostage/v9.0.2from
BED-7930-upgrade-pgx-to-v5.9
Apr 20, 2026
Merged

chore: upgrade pgx to v5.9.0 to remediate CVE-2026-33815 and CVE-2026-33816 BED-7930#2679
elikmiller merged 1 commit intostage/v9.0.2from
BED-7930-upgrade-pgx-to-v5.9

Conversation

@elikmiller
Copy link
Copy Markdown
Contributor

@elikmiller elikmiller commented Apr 20, 2026

Description

  • Upgraded github.com/jackc/pgx/v5 from v5.8.0 to v5.9.0
  • Remediates critical CVEs identified by Docker Scout

Motivation and Context

BED-7930

How Has This Been Tested?

  • All CI tests continue to pass

Types of changes

  • Chore (a change that does not modify the application functionality)

Checklist:

…-33816 BED-7930

- Upgraded github.com/jackc/pgx/v5 from v5.8.0 to v5.9.0
- Remediates critical CVEs identified by Docker Scout
- All tests passing
- See: jackc/pgx#2530
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 20, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7c022d1d-4955-419a-a635-bf8f34e185f2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch BED-7930-upgrade-pgx-to-v5.9

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@elikmiller elikmiller marked this pull request as ready for review April 20, 2026 17:53
@elikmiller elikmiller changed the title chore: upgrade pgx to v5.9.0 to remediate CVE-2026-33815 and CVE-2026… chore: upgrade pgx to v5.9.0 to remediate CVE-2026-33815 and CVE-2026-33816 BED-7930 Apr 20, 2026
@elikmiller elikmiller self-assigned this Apr 20, 2026
@elikmiller elikmiller added the dependencies Pull requests that update a dependency file label Apr 20, 2026
@elikmiller elikmiller merged commit 556927b into stage/v9.0.2 Apr 20, 2026
14 checks passed
@elikmiller elikmiller deleted the BED-7930-upgrade-pgx-to-v5.9 branch April 20, 2026 17:58
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants