Skip to content

Bump github.com/cloudfoundry/bosh-cli/v7 from 7.9.13 to 7.10.2#118

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/github.com/cloudfoundry/bosh-cli/v7-7.10.2
Closed

Bump github.com/cloudfoundry/bosh-cli/v7 from 7.9.13 to 7.10.2#118
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/github.com/cloudfoundry/bosh-cli/v7-7.10.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Bumps github.com/cloudfoundry/bosh-cli/v7 from 7.9.13 to 7.10.2.

Release notes

Sourced from github.com/cloudfoundry/bosh-cli/v7's releases.

v7.10.2

Fixed CVEs:

Assets

                                                          sha256  file
d9a52693994bdefc2fc73f1fe16042ffed48c6931308c6a9ae3520413d73065c  bosh-cli-7.10.2-linux-amd64
6ad843ca6725b7c50c1d2797a468c3911e192b98fa0ecf58402800d93697ca14  bosh-cli-7.10.2-linux-arm64
5c9df7a7127690bf7320508a1110b010a9a7db5124da101f02efef914e4295e7  bosh-cli-7.10.2-darwin-amd64
285f9d01c3c4eeb49ef7756972dd27ec85f9198f8344f9cc62add7c604feecf0  bosh-cli-7.10.2-darwin-arm64
559b86ecd95fb1fe5dfc81280d4f42f9be811e128444bbbb228d5d9b45743747  bosh-cli-7.10.2-windows-amd64.exe

v7.10.1

Fixed CVEs:

  • CVE-2026-33186: gRPC-Go has an authorization bypass via missing leading slash in :path

Assets

                                                          sha256  file
798bb0b2e36890e77aa823d1fb05c9a2abd6ec18045016ee748f6c81d180f51c  bosh-cli-7.10.1-linux-amd64
535ab9562133de8181bd32056932404a00c4f640218373d6b20920b9c006226c  bosh-cli-7.10.1-linux-arm64
5e67600faf2b9a26038d696d48d341697be1c003696184048414130e451ce66d  bosh-cli-7.10.1-darwin-amd64
fc698f487e0a83b84bf02ccaefd9d145ecd3e9102fc5ab1d9399c34e1a1e7d92  bosh-cli-7.10.1-darwin-arm64
1efb9916cb8d44262b94b54a5c7ba480e221a1bf2e417fd6e088b6908acaf286  bosh-cli-7.10.1-windows-amd64.exe

v7.10.0

Assets

                                                          sha256  file
5118551ddbc7cd1c266d5cfd21a2082821f4aa51f985f7a623c76e12faa4c445  bosh-cli-7.10.0-linux-amd64
9ccf023e71ad403024155f6a076b4aa9802a1d11ae31be352c49eaf4e807f128  bosh-cli-7.10.0-linux-arm64
a408db7e3577cf5c775a70df5d6e66e974a8797ccb8961f07f358b04cb978df6  bosh-cli-7.10.0-darwin-amd64
7d543768cca9a4d9da94e9de5434774c63ae2c4a8cf372cb63f1d8012aa156b6  bosh-cli-7.10.0-darwin-arm64
e12aa858a9b0afd86e85c139f3ec1d0f12708bc402921140ac2a322c7b6e08ce  bosh-cli-7.10.0-windows-amd64.exe

What's Changed

New Contributors

Full Changelog: cloudfoundry/bosh-cli@v7.9.19...v7.10.0

... (truncated)

Commits
  • ceb06d5 Update vendored dependencies
  • 5d6f4e9 Update vendored dependencies
  • e803c02 Update vendored dependencies
  • a22fd64 Fix: update specs to match err string w/o case sensitivity
  • 27da0d5 Bump google.golang.org/grpc from 1.79.2 to 1.79.3
  • 9e93907 Merge pull request #714 from ay901246/task-heartbeat-logger
  • 6f192ee Add --with-heartbeat flag for heartbeat logging during long-running errands
  • 3d084d8 Update vendored dependencies
  • 67eaebd Update vendored dependencies
  • c5619f3 Merge pull request #709 from rubionic/rubionic/fix-ostruct-dependency-issue-229
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 13, 2026
Bumps [github.com/cloudfoundry/bosh-cli/v7](https://github.com/cloudfoundry/bosh-cli) from 7.9.13 to 7.10.2.
- [Release notes](https://github.com/cloudfoundry/bosh-cli/releases)
- [Commits](cloudfoundry/bosh-cli@v7.9.13...v7.10.2)

---
updated-dependencies:
- dependency-name: github.com/cloudfoundry/bosh-cli/v7
  dependency-version: 7.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/master/github.com/cloudfoundry/bosh-cli/v7-7.10.2 branch from 70eff24 to dd83b47 Compare April 14, 2026 19:58
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Superseded by #124.

@dependabot dependabot Bot closed this Apr 27, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/master/github.com/cloudfoundry/bosh-cli/v7-7.10.2 branch April 27, 2026 14:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants