github/node-problem-detector
1
0
Fork 0
mirror of https://github.com/kubernetes/node-problem-detector.git synced 2026-08-20 12:46:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,225 Commits 12 Branches 59 Tags
6097eaba5493a1a24377d6a6c09a9e4c2e246ef0
Commit Graph
70 Commits
Author SHA1 Message Date
Ciprian Hacman 6097eaba54 Bump github.com/prometheus/prometheus to v0.311.3 to fix CVEs 
The bump to v0.311.3 from commit 98e831b4 ("Fix Grype CVEs: update
logrus and prometheus/prometheus") was unintentionally reverted to
v0.35.0 by the go.mod conflict resolution in commit f844870a ("Run go
mod tidy and adapt to prometheus/common v0.67 API").

Re-apply it to fix CVE-2026-42154 (High), CVE-2026-40179 and
CVE-2026-44903 (Medium).

prometheus/prometheus v0.311.3 requires k8s.io/client-go v0.35.x,
which would drag the k8s.io modules past the v0.34 line this branch
must stay on. Pin k8s.io/api, k8s.io/apimachinery and k8s.io/client-go
back to v0.34.1 with replace directives in both the root and test
modules, so the built binaries keep using v0.34.1 (the replacement is
also what gets recorded in the binary build info).

The only prometheus/prometheus package linked into the NPD binaries is
model/value, so none of the k8s-facing prometheus code is compiled.
 2026-07-11 14:43:40 +03:00
Ciprian Hacman f844870ae3 Run go mod tidy and adapt to prometheus/common v0.67 API 2026-05-04 12:04:39 +03:00
Bruno ChauvetandCiprian Hacman 98e831b4f0 Fix Grype CVEs: update logrus and prometheus/prometheus 
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
  to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
  to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
 2026-05-04 10:39:49 +03:00
Kubernetes Prow RobotandGitHub dd50915b31 Merge pull request #1113 from SergeyKanzhelev/k8s134
CodeQL / Analyze (go) (push) Failing after 19s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 19s 
upgraded reference to k8s 1.34
 2025-09-10 23:24:10 -07:00
dependabot[bot]andGitHub 32578b2cad chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.7 to 1.0.10.
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](https://github.com/spf13/pflag/compare/v1.0.7...v1.0.10)

---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-10 20:47:12 +00:00
dependabot[bot]andGitHub 8e1f3e1e8f chore(deps): bump github.com/shirou/gopsutil/v4 from 4.25.7 to 4.25.8 
Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) from 4.25.7 to 4.25.8.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](https://github.com/shirou/gopsutil/compare/v4.25.7...v4.25.8)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-08 21:27:46 +00:00
Sergey Kanzhelev 64bf95b7fa upgraded reference to k8s 1.34 2025-09-08 18:04:01 +00:00
Sergey Kanzhelev db7eb8366c updated gopsutil 2025-08-13 21:53:17 +00:00
Ciprian Hacman ffaefd99ac Update dependencies 2025-08-10 07:59:08 +03:00
Ciprian HacmanandCiprian Hacman 0147098968 Update dependencies 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
Signed-off-by: Ciprian Hacman <chacman@microsoft.com>
 2025-04-28 17:41:41 +03:00
Ciprian HacmanandCiprian Hacman 0f1ee66855 Update dependencies 
Signed-off-by: Ciprian Hacman <chacman@microsoft.com>
 2025-04-14 16:52:20 +03:00
dependabot[bot]andGitHub 2707945338 chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](https://github.com/spf13/pflag/compare/v1.0.5...v1.0.6)

---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 21:41:12 +00:00
dependabot[bot]andGitHub 7cb27449aa chore(deps): bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1 
Bumps [github.com/avast/retry-go/v4](https://github.com/avast/retry-go) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/avast/retry-go/releases)
- [Commits](https://github.com/avast/retry-go/compare/4.6.0...4.6.1)

---
updated-dependencies:
- dependency-name: github.com/avast/retry-go/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-27 05:08:00 +00:00
github-actions be9ba585dd Update dependencies 2024-08-16 06:06:29 +00:00
github-actions 1fbfdfd4f7 Update dependencies 2024-08-02 06:07:33 +00:00
github-actions c0bccb7c76 Update dependencies 2024-07-19 06:06:26 +00:00
github-actions 7a48ce2e38 Update dependencies 2024-06-07 06:06:34 +00:00
github-actions 09bbaa9c32 Update dependencies 2024-05-17 06:06:00 +00:00
github-actions 5f59f438ac Update dependencies 2024-05-10 06:05:45 +00:00
github-actions 338430f835 Update dependencies 2024-05-03 06:05:43 +00:00
github-actions 273c3f5266 Update dependencies 2024-04-26 06:05:56 +00:00
github-actions 7d81d8e12a Update dependencies 2024-04-19 06:06:22 +00:00
github-actions e4f8f268e8 Update dependencies 2024-04-12 06:05:27 +00:00
github-actions 6c34d567d4 Update dependencies 2024-04-03 22:17:34 +00:00
github-actions 10378c8b11 Update dependencies 2024-03-25 21:18:45 +00:00
Ciprian Hacman 9769baefb9 Update dependencies 2024-03-06 07:12:46 +02:00
Ciprian Hacman 08b2255c33 Update dependencies 2024-02-28 06:27:06 +02:00
Ciprian Hacman ef98b9612e Update dependencies 2024-02-04 06:24:27 +02:00
acumino 73a120de57 bump k8s.io to 0.29.0 2023-12-15 13:10:06 +05:30
Ciprian Hacman a5aadf719a Update github.com/avast/retry-go to v4.5.0 2023-09-24 11:25:19 +02:00
Ciprian Hacman fdd522a951 Update github.com/coreos/go-systemd to v22.5.0 2023-09-20 07:13:42 +03:00
Manuel RügerandCiprian Hacman e43459d86d Move glog/klog logging to klog/v2 2023-09-17 08:57:33 +03:00
Fan Shang Xiang 8283e091cd bump k8s.io/client-go to 1.28.2 2023-09-14 06:22:49 +00:00
Ciprian Hacman 9ad24ea2c7 Move test dependencies to test dir 2023-09-11 21:14:19 +03:00
Manuel Rüger c4311bd207 Move github.com/shirou/gopsutil to v3 2023-09-11 12:18:22 +02:00
Ciprian Hacman 2077606ba3 Remove direct dependency on google/cadvisor 2023-09-08 15:28:25 +03:00
Fan Shang Xiang 469ba765fd bump k8s.io deps to v0.28.1 2023-08-31 06:31:28 +00:00
Fan Shang Xiang e14abd4ea5 bump boskos client 
Signed-off-by: Fan Shang Xiang <shafan@microsoft.com>
 2023-07-06 01:00:41 +08:00
Mike Miranda 5fd18a117f Update dependencies to latest 2023-06-29 18:30:57 +00:00
Fan Shang Xiang b5e4ef628b bump k8s.io to 1.17.2 2023-06-12 22:27:39 +08:00
Varsha Teratipally e8b55acc2b update golang to 1.20 2023-02-09 20:36:36 +00:00
Pablo Baeyens 5e300846b2 Merge remote-tracking branch 'origin/master' into mx-psi/master 2022-03-29 14:45:27 -04:00
varsha teratipally 20c3b6f13c update ginkgo and gomega dependencies 2022-03-24 16:25:03 +00:00
Pablo BaeyensandPablo Baeyens a859b5f027 Change to using new dependency name for osreleaser 
To do this I
1. changed the name in go.mod and the Go code that used it,
2. ran `go mod tidy -go=1.15` and
3. ran `go mod vendor`.

Step 3 added another vendored dependency unrelated AFAIK to this change.
 2021-11-29 16:45:48 +01:00
Karan Goel db35f6a857 bump some dependencies to latest versions 2020-11-09 15:33:13 -08:00
Xuewei Zhang 9ade82734d Add github.com/prometheus/procfs library 2020-01-31 16:02:15 -08:00
Xuewei Zhang 7f9437cba0 Add github.com/shirou/gopsutil/load library 2020-01-31 15:42:57 -08:00
Xuewei Zhang 40cb3e0fec Vendor changes for gomega 2019-12-04 17:17:53 -08:00
Xuewei Zhang 3fc6c7f306 Add vendor code for Boskos 
Added replace statement for apache/thrift, since it has been recently
moved from git.apache.org/thrift.git to github.com/apache/thrift, and is
causing `go get` to fail.

See https://github.com/jenkins-x/jx/pull/3321 for more detail.

Commands used:
GO111MODULE=on go get k8s.io/test-infra/boskos/client
GO111MODULE=on go mod vendor
 2019-09-14 15:22:09 -07:00
Xuewei Zhang 42285cb8db vendor changes 2019-09-10 16:58:06 -07:00