Commit Graph
1377 Commits
Author SHA1 Message Date
Veer Singh 798cc3bd1d Document rule interval scheduling behavior
State that rules with different intervals run on independent schedules.
State the concurrency limit and the catch-up behavior.
State the rule timeout validation limit.
2026-07-20 14:24:04 -07:00
Veer Singh 25105fd576 Add per-rule custom plugin intervals
Group rules by their effective invoke interval.
Use the global interval when a rule omits its interval.
Reject non-positive invoke intervals before scheduler startup.
Test grouped cadence, concurrency, and shutdown behavior.
2026-07-20 13:55:00 -07:00
kubernetes-prow[bot]andGitHub 059959141d Merge pull request #1307 from dpacgdm/fix/cri-timeout-default-config
config: include --cri-timeout in containerd health-checker defaults
2026-07-14 03:46:20 +00:00
dpacgdm 43702a7424 config: include --cri-timeout in containerd health-checker defaults
The health-checker binary honors --cri-timeout when passed via custom
plugin rule args. The default containerd configs omitted the flag, so
crictl used the 2s built-in default. Add --cri-timeout=10s to the
sample Linux and Windows containerd configs.

Signed-off-by: dpacgdm <dpac.gdm@gmail.com>
2026-07-13 10:44:14 +05:30
kubernetes-prow[bot]andGitHub 0c4b90362a Merge pull request #1317 from hakman/security-policy
chore(docs): add security policy for dependency CVEs and scanner findings
2026-07-12 10:35:46 +00:00
kubernetes-prow[bot]andGitHub 0191225ffe Merge pull request #1302 from hakman/pre-vendor-otel-deps
chore(deps): pre-vendor OpenTelemetry dependencies
2026-07-11 21:29:45 +00:00
Ciprian Hacman b28b99ca4f chore(docs): Add security policy for dependency CVEs and scanner findings 2026-07-12 00:20:58 +03:00
kubernetes-prow[bot]andGitHub f155e6581e Merge pull request #1315 from hakman/release-1.37.0-alpha.1
Release v1.37.0-alpha.1
v1.37.0-alpha.1
2026-07-11 18:25:45 +00:00
Ciprian Hacman 20c2281883 Release v1.37.0-alpha.1 2026-07-11 20:18:03 +03:00
Ciprian Hacman 8a2a897a0f chore(deps): pre-vendor OpenTelemetry dependencies 2026-07-11 19:32:53 +03:00
Ciprian HacmanandGitHub 19d58b0ede Release v1.36.0 (#1312) v1.36.0 2026-07-11 15:37:44 +00:00
kubernetes-prow[bot]andGitHub 1a2203f2b4 Merge pull request #1311 from hakman/kmsg-watcher-fixes
Fix kmsg watcher restart and shutdown issues
2026-07-11 08:23:44 +00:00
Ciprian Hacman a20306e6a1 fix(logwatchers/kmsg): don't close the old parser twice when Stop() interrupts a restart
The restart path closes the failed parser before retrying. If stopping
is signaled during the retry wait, watchLoop's deferred cleanup closed
the same parser again, logging a spurious 'file already closed' error
at shutdown. Clear the reference after closing and nil-check the defer.
2026-07-11 10:28:27 +03:00
Ciprian Hacman b77c1eb03f fix(logwatchers/kmsg): don't block Stop() when the log channel is full
The log monitor stops draining logCh before calling watcher.Stop(), so
with a full channel (e.g. a kmsg burst at shutdown) watchLoop blocked
on the send forever, never called tomb.Done(), and Stop() hung.
Select on tomb.Stopping() alongside the send.
2026-07-11 10:27:59 +03:00
Ciprian Hacman 187d4d30d6 fix(logwatchers/kmsg): rate-limit parser restarts to prevent hot loop
If the restarted parser's channel closes again right away (reads keep
failing on the reopened /dev/kmsg), the watcher restarts in a tight
loop with no delay, spinning a CPU core and flooding the logs
(measured 37k restarts in 200ms). Delay the first attempt when the
previous restart was less than retryDelay ago.
2026-07-11 10:27:37 +03:00
kubernetes-prow[bot]andGitHub 97d58d2cb5 Merge pull request #1299 from hakman/bump-go-1.26.5
Bump Go to 1.26.5 and golang.org/x modules
2026-07-08 18:14:30 +00:00
Ciprian Hacman 05993a1e48 Bump Go to 1.26.5 and golang.org/x modules 2026-07-07 23:38:58 +03:00
kubernetes-prow[bot]andGitHub f389d289af Merge pull request #1298 from kubernetes/dependabot/github_actions/actions-all-ac07fb48a3
chore(deps): bump the actions-all group with 4 updates
2026-07-06 22:36:26 +00:00
dependabot[bot]andGitHub 69c13dbb52 chore(deps): bump the actions-all group with 4 updates
Bumps the actions-all group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `github/codeql-action/autobuild` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-06 21:34:01 +00:00
kubernetes-prow[bot]andGitHub e5aeec637c Merge pull request #1296 from kubernetes/dependabot/github_actions/actions-all-e9d0490af8
chore(deps): bump the actions-all group with 6 updates
2026-07-02 05:40:16 +00:00
dependabot[bot]andGitHub 72d21b8e05 chore(deps): bump the actions-all group with 6 updates
Bumps the actions-all group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `6.5.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` |


Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `github/codeql-action/init` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

Updates `github/codeql-action/autobuild` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

Updates `github/codeql-action/analyze` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

Updates `actions/setup-go` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)

Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
- dependency-name: github/codeql-action/init
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-all
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 21:34:09 +00:00
kubernetes-prow[bot]andGitHub 9d72de70de Merge pull request #1292 from kubernetes/dependabot/go_modules/k8s-e9e565eaea
chore(deps): bump the k8s group across 2 directories with 4 updates
2026-06-23 18:24:28 +00:00
kubernetes-prow[bot]andGitHub b116f41d95 Merge pull request #1287 from kubernetes/dependabot/github_actions/actions-all-9536cf61b4
chore(deps): bump the actions-all group with 3 updates
2026-06-23 18:24:21 +00:00
kubernetes-prow[bot]andGitHub 3af9f356a3 Merge pull request #1294 from hakman/deploy-npd-as-daemonset
test: deploy NPD for cluster e2e
2026-06-23 14:46:39 +00:00
Ciprian Hacman 58542a3731 test: deploy NPD for cluster e2e
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2026-06-23 15:45:42 +03:00
kubernetes-prow[bot]andGitHub 3c9bbe70ed Merge pull request #1293 from hakman/fix-e2e-pull
test: pull node e2e image from the community staging registry
2026-06-23 10:36:38 +00:00
Ciprian Hacman bcac1a6db9 test: pull node e2e image from the community staging registry 2026-06-23 10:37:08 +03:00
dependabot[bot]andGitHub 3c56ab38e4 chore(deps): bump the k8s group across 2 directories with 4 updates
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/client-go](https://github.com/kubernetes/client-go).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/component-base](https://github.com/kubernetes/component-base).


Updates `k8s.io/api` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/api/compare/v0.35.5...v0.35.6)

Updates `k8s.io/apimachinery` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.5...v0.35.6)

Updates `k8s.io/client-go` from 0.35.5 to 0.35.6
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.5...v0.35.6)

Updates `k8s.io/apimachinery` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.5...v0.35.6)

Updates `k8s.io/component-base` from 0.34.8 to 0.34.9
- [Commits](https://github.com/kubernetes/component-base/compare/v0.34.8...v0.34.9)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-15 21:36:36 +00:00
dependabot[bot]andGitHub bbe1750f5d chore(deps): bump the actions-all group with 3 updates
Bumps the actions-all group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `step-security/harden-runner` from 2.19.3 to 2.19.4
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/ab7a9404c0f3da075243ca237b5fac12c98deaa5...9af89fc71515a100421586dfdb3dc9c984fbf411)

Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

Updates `github/codeql-action` from 4.35.5 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...87557b9c84dde89fdd9b10e88954ac2f4248e463)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action
  dependency-version: 4.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 09:59:28 +00:00
Kubernetes Prow RobotandGitHub 8a5df6d6de Merge pull request #1278 from halaney/ahalaney/fix-sigterm
fix: handle SIGTERM gracefully on unix
2026-05-27 14:57:50 +05:30
Kubernetes Prow RobotandGitHub 2513573a64 Merge pull request #1283 from kubernetes/dependabot/go_modules/k8s-6df07cb3e1
chore(deps): bump the k8s group across 2 directories with 4 updates
2026-05-26 11:29:22 +05:30
Kubernetes Prow RobotandGitHub b79128a55d Merge pull request #1282 from kubernetes/dependabot/github_actions/actions-all-b38edd2d4c
chore(deps): bump the actions-all group with 2 updates
2026-05-26 11:29:15 +05:30
Kubernetes Prow RobotandGitHub f61cff1b24 Merge pull request #1284 from kubernetes/dependabot/docker/build-image/debian-base-bookworm-v1.0.8
chore(deps): bump build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8
2026-05-26 10:49:15 +05:30
dependabot[bot]andGitHub 1d01ffae34 chore(deps): bump build-image/debian-base
Bumps build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8.

---
updated-dependencies:
- dependency-name: build-image/debian-base
  dependency-version: bookworm-v1.0.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 03:02:23 +00:00
dependabot[bot]andGitHub 25da70d6f9 chore(deps): bump the k8s group across 2 directories with 4 updates
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/client-go](https://github.com/kubernetes/client-go).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/component-base](https://github.com/kubernetes/component-base).


Updates `k8s.io/api` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/api/compare/v0.35.4...v0.35.5)

Updates `k8s.io/apimachinery` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.35.5)

Updates `k8s.io/client-go` from 0.35.4 to 0.35.5
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.4...v0.35.5)

Updates `k8s.io/apimachinery` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.35.5)

Updates `k8s.io/component-base` from 0.34.7 to 0.34.8
- [Commits](https://github.com/kubernetes/component-base/compare/v0.34.7...v0.34.8)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 06:36:29 +00:00
dependabot[bot]andGitHub 77f65b437a chore(deps): bump the actions-all group with 2 updates
Bumps the actions-all group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `step-security/harden-runner` from 2.19.1 to 2.19.3
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/a5ad31d6a139d249332a2605b85202e8c0b78450...ab7a9404c0f3da075243ca237b5fac12c98deaa5)

Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 06:36:20 +00:00
Kubernetes Prow RobotandGitHub 87bbc58e7e Merge pull request #1280 from kubernetes/dependabot/github_actions/actions-all-085e74bc6a
chore(deps): bump the actions-all group with 2 updates
2026-05-12 10:48:12 +05:30
dependabot[bot]andGitHub e715cf519e chore(deps): bump the actions-all group with 2 updates
Bumps the actions-all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action).


Updates `github/codeql-action` from 4.35.3 to 4.35.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e)

Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/2031cfc080254a8a887f58cffee85186f0e49e48...a1d282b36b6f3519aa1f3fc636f609c47dddb294)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: actions/dependency-review-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-12 03:51:55 +00:00
Andrew Halaney 31d036e27f fix: handle SIGTERM gracefully on unix
We weren't catching SIGTERM and cancelling our context, so the go
runtime would have us exit with a non-zero code when the signal was
received. Let's catch it and try to exit gracefully.

i.e. before:

    (...)
    I0508 11:08:00.426917 1787442 log_monitor.go:237] Initialize condition generated: []
    ^C
    $ echo $?
    130

and now:

    (...)
    I0508 11:07:42.150562 1787146 log_monitor.go:237] Initialize condition generated: []
    ^C
    I0508 11:07:43.372093 1787146 log_monitor.go:123] Stop log monitor /tmp/npd-test.json
    I0508 11:07:43.652876 1787146 log_watcher.go:104] Stop watching filelog
    I0508 11:07:43.652923 1787146 log_monitor.go:144] Log monitor stopped: /tmp/npd-test.json
    $ echo $?
    0
2026-05-08 11:14:38 -05:00
Kubernetes Prow RobotandGitHub 653620acfa Merge pull request #1276 from kubernetes/dependabot/github_actions/actions-all-872c82b62f
chore(deps): bump the actions-all group with 2 updates
2026-05-06 08:36:21 +05:30
dependabot[bot]andGitHub bf5ef5d152 chore(deps): bump the actions-all group with 2 updates
Bumps the actions-all group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `step-security/harden-runner` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/8d3c67de8e2fe68ef647c8db1e6a09f647780f40...a5ad31d6a139d249332a2605b85202e8c0b78450)

Updates `github/codeql-action` from 4.35.2 to 4.35.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-05 01:09:27 +00:00
Kubernetes Prow RobotandGitHub f06e6faf79 Merge pull request #1272 from BrunoChauvet/fix/grype-vulnerabilities-logrus-prometheus
Fix CVEs and update builder image to golang:1.25.9
2026-05-04 11:13:38 +05:30
Bruno Chauvet 21e602edef Update builder image to golang:1.25.9-bookworm 2026-05-03 10:09:38 -04:00
Bruno Chauvet 877b6d6908 Fix Grype CVEs: update logrus and prometheus/prometheus
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
  to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
  to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
2026-05-03 10:05:37 -04:00
Kubernetes Prow RobotandGitHub 45979bdf4e Merge pull request #1270 from ajaysundark/cve-fix
Update grpc to v1.79.3 to fix CVE-2026-33186
2026-04-24 00:30:47 +05:30
Ajay Sundar Karuppasamy e99d20b019 Align otel dependency with k8s v1.41.0 2026-04-23 18:13:03 +00:00
Ajay Sundar Karuppasamy 925c629e37 Run go mod tidy in test directory to fix e2e build 2026-04-23 18:10:45 +00:00
Ajay Sundar Karuppasamy 6464b9efac Update grpc to v1.79.3 to fix CVE-2026-33186 2026-04-23 17:56:14 +00:00
Pierluigi LenociandCiprian Hacman 0c927ad8ec fix: honor stderrthreshold on Windows entrypoint
The Unix entrypoint already sets legacy_stderr_threshold_behavior=false
and stderrthreshold=INFO, but the Windows entrypoint was missed.

klog v2 defaults -logtostderr to true. When active, -stderrthreshold is
silently ignored — all log levels are unconditionally sent to stderr.
Setting legacy_stderr_threshold_behavior=false enables the fix so that
-stderrthreshold is honored even when -logtostderr=true.

Ref: kubernetes/klog#212, kubernetes/klog#432

Signed-off-by: Pierluigi Lenoci <pierluigi.lenoci@gmail.com>
Signed-off-by: Pierluigi Lenoci <pierluigilenoci@gmail.com>
2026-04-23 11:53:08 +03:00
Kubernetes Prow RobotandGitHub cc85ca1c59 Merge pull request #1264 from kubernetes/dependabot/github_actions/actions-all-d52dfeb8fb
chore(deps): bump the actions-all group across 1 directory with 2 updates
2026-04-22 18:11:52 +05:30