Veer Singh
798cc3bd1d
Document rule interval scheduling behavior
...
State that rules with different intervals run on independent schedules.
State the concurrency limit and the catch-up behavior.
State the rule timeout validation limit.
2026-07-20 14:24:04 -07:00
Veer Singh
25105fd576
Add per-rule custom plugin intervals
...
Group rules by their effective invoke interval.
Use the global interval when a rule omits its interval.
Reject non-positive invoke intervals before scheduler startup.
Test grouped cadence, concurrency, and shutdown behavior.
2026-07-20 13:55:00 -07:00
kubernetes-prow[bot] and GitHub
059959141d
Merge pull request #1307 from dpacgdm/fix/cri-timeout-default-config
...
config: include --cri-timeout in containerd health-checker defaults
2026-07-14 03:46:20 +00:00
dpacgdm
43702a7424
config: include --cri-timeout in containerd health-checker defaults
...
The health-checker binary honors --cri-timeout when passed via custom
plugin rule args. The default containerd configs omitted the flag, so
crictl used the 2s built-in default. Add --cri-timeout=10s to the
sample Linux and Windows containerd configs.
Signed-off-by: dpacgdm <dpac.gdm@gmail.com >
2026-07-13 10:44:14 +05:30
kubernetes-prow[bot] and GitHub
0c4b90362a
Merge pull request #1317 from hakman/security-policy
...
chore(docs): add security policy for dependency CVEs and scanner findings
2026-07-12 10:35:46 +00:00
kubernetes-prow[bot] and GitHub
0191225ffe
Merge pull request #1302 from hakman/pre-vendor-otel-deps
...
chore(deps): pre-vendor OpenTelemetry dependencies
2026-07-11 21:29:45 +00:00
Ciprian Hacman
b28b99ca4f
chore(docs): Add security policy for dependency CVEs and scanner findings
2026-07-12 00:20:58 +03:00
kubernetes-prow[bot] and GitHub
f155e6581e
Merge pull request #1315 from hakman/release-1.37.0-alpha.1
...
Release v1.37.0-alpha.1
v1.37.0-alpha.1
2026-07-11 18:25:45 +00:00
Ciprian Hacman
20c2281883
Release v1.37.0-alpha.1
2026-07-11 20:18:03 +03:00
Ciprian Hacman
8a2a897a0f
chore(deps): pre-vendor OpenTelemetry dependencies
2026-07-11 19:32:53 +03:00
Ciprian Hacman and GitHub
19d58b0ede
Release v1.36.0 ( #1312 )
v1.36.0
2026-07-11 15:37:44 +00:00
kubernetes-prow[bot] and GitHub
1a2203f2b4
Merge pull request #1311 from hakman/kmsg-watcher-fixes
...
Fix kmsg watcher restart and shutdown issues
2026-07-11 08:23:44 +00:00
Ciprian Hacman
a20306e6a1
fix(logwatchers/kmsg): don't close the old parser twice when Stop() interrupts a restart
...
The restart path closes the failed parser before retrying. If stopping
is signaled during the retry wait, watchLoop's deferred cleanup closed
the same parser again, logging a spurious 'file already closed' error
at shutdown. Clear the reference after closing and nil-check the defer.
2026-07-11 10:28:27 +03:00
Ciprian Hacman
b77c1eb03f
fix(logwatchers/kmsg): don't block Stop() when the log channel is full
...
The log monitor stops draining logCh before calling watcher.Stop(), so
with a full channel (e.g. a kmsg burst at shutdown) watchLoop blocked
on the send forever, never called tomb.Done(), and Stop() hung.
Select on tomb.Stopping() alongside the send.
2026-07-11 10:27:59 +03:00
Ciprian Hacman
187d4d30d6
fix(logwatchers/kmsg): rate-limit parser restarts to prevent hot loop
...
If the restarted parser's channel closes again right away (reads keep
failing on the reopened /dev/kmsg), the watcher restarts in a tight
loop with no delay, spinning a CPU core and flooding the logs
(measured 37k restarts in 200ms). Delay the first attempt when the
previous restart was less than retryDelay ago.
2026-07-11 10:27:37 +03:00
kubernetes-prow[bot] and GitHub
97d58d2cb5
Merge pull request #1299 from hakman/bump-go-1.26.5
...
Bump Go to 1.26.5 and golang.org/x modules
2026-07-08 18:14:30 +00:00
Ciprian Hacman
05993a1e48
Bump Go to 1.26.5 and golang.org/x modules
2026-07-07 23:38:58 +03:00
kubernetes-prow[bot] and GitHub
f389d289af
Merge pull request #1298 from kubernetes/dependabot/github_actions/actions-all-ac07fb48a3
...
chore(deps): bump the actions-all group with 4 updates
2026-07-06 22:36:26 +00:00
dependabot[bot] and GitHub
69c13dbb52
chore(deps): bump the actions-all group with 4 updates
...
Bumps the actions-all group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
Updates `github/codeql-action/autobuild` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action/analyze
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-06 21:34:01 +00:00
kubernetes-prow[bot] and GitHub
e5aeec637c
Merge pull request #1296 from kubernetes/dependabot/github_actions/actions-all-e9d0490af8
...
chore(deps): bump the actions-all group with 6 updates
2026-07-02 05:40:16 +00:00
dependabot[bot] and GitHub
72d21b8e05
chore(deps): bump the actions-all group with 6 updates
...
Bumps the actions-all group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `6.0.3` | `7.0.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [actions/setup-go](https://github.com/actions/setup-go ) | `6.4.0` | `6.5.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
Updates `github/codeql-action/init` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
Updates `github/codeql-action/autobuild` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
Updates `github/codeql-action/analyze` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
Updates `actions/setup-go` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16 )
Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: github/codeql-action/init
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action/analyze
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: actions/setup-go
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-29 21:34:09 +00:00
kubernetes-prow[bot] and GitHub
9d72de70de
Merge pull request #1292 from kubernetes/dependabot/go_modules/k8s-e9e565eaea
...
chore(deps): bump the k8s group across 2 directories with 4 updates
2026-06-23 18:24:28 +00:00
kubernetes-prow[bot] and GitHub
b116f41d95
Merge pull request #1287 from kubernetes/dependabot/github_actions/actions-all-9536cf61b4
...
chore(deps): bump the actions-all group with 3 updates
2026-06-23 18:24:21 +00:00
kubernetes-prow[bot] and GitHub
3af9f356a3
Merge pull request #1294 from hakman/deploy-npd-as-daemonset
...
test: deploy NPD for cluster e2e
2026-06-23 14:46:39 +00:00
Ciprian Hacman
58542a3731
test: deploy NPD for cluster e2e
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev >
2026-06-23 15:45:42 +03:00
kubernetes-prow[bot] and GitHub
3c9bbe70ed
Merge pull request #1293 from hakman/fix-e2e-pull
...
test: pull node e2e image from the community staging registry
2026-06-23 10:36:38 +00:00
Ciprian Hacman
bcac1a6db9
test: pull node e2e image from the community staging registry
2026-06-23 10:37:08 +03:00
dependabot[bot] and GitHub
3c56ab38e4
chore(deps): bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/api/compare/v0.35.5...v0.35.6 )
Updates `k8s.io/apimachinery` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.5...v0.35.6 )
Updates `k8s.io/client-go` from 0.35.5 to 0.35.6
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.5...v0.35.6 )
Updates `k8s.io/apimachinery` from 0.35.5 to 0.35.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.5...v0.35.6 )
Updates `k8s.io/component-base` from 0.34.8 to 0.34.9
- [Commits](https://github.com/kubernetes/component-base/compare/v0.34.8...v0.34.9 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.35.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-version: 0.35.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-version: 0.34.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-15 21:36:36 +00:00
dependabot[bot] and GitHub
bbe1750f5d
chore(deps): bump the actions-all group with 3 updates
...
Bumps the actions-all group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner ), [actions/checkout](https://github.com/actions/checkout ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `step-security/harden-runner` from 2.19.3 to 2.19.4
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/ab7a9404c0f3da075243ca237b5fac12c98deaa5...9af89fc71515a100421586dfdb3dc9c984fbf411 )
Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
Updates `github/codeql-action` from 4.35.5 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...87557b9c84dde89fdd9b10e88954ac2f4248e463 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.19.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action
dependency-version: 4.36.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 09:59:28 +00:00
Kubernetes Prow Robot and GitHub
8a5df6d6de
Merge pull request #1278 from halaney/ahalaney/fix-sigterm
...
fix: handle SIGTERM gracefully on unix
2026-05-27 14:57:50 +05:30
Kubernetes Prow Robot and GitHub
2513573a64
Merge pull request #1283 from kubernetes/dependabot/go_modules/k8s-6df07cb3e1
...
chore(deps): bump the k8s group across 2 directories with 4 updates
2026-05-26 11:29:22 +05:30
Kubernetes Prow Robot and GitHub
b79128a55d
Merge pull request #1282 from kubernetes/dependabot/github_actions/actions-all-b38edd2d4c
...
chore(deps): bump the actions-all group with 2 updates
2026-05-26 11:29:15 +05:30
Kubernetes Prow Robot and GitHub
f61cff1b24
Merge pull request #1284 from kubernetes/dependabot/docker/build-image/debian-base-bookworm-v1.0.8
...
chore(deps): bump build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8
2026-05-26 10:49:15 +05:30
dependabot[bot] and GitHub
1d01ffae34
chore(deps): bump build-image/debian-base
...
Bumps build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8.
---
updated-dependencies:
- dependency-name: build-image/debian-base
dependency-version: bookworm-v1.0.8
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-26 03:02:23 +00:00
dependabot[bot] and GitHub
25da70d6f9
chore(deps): bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/api/compare/v0.35.4...v0.35.5 )
Updates `k8s.io/apimachinery` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.35.5 )
Updates `k8s.io/client-go` from 0.35.4 to 0.35.5
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.4...v0.35.5 )
Updates `k8s.io/apimachinery` from 0.35.4 to 0.35.5
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.4...v0.35.5 )
Updates `k8s.io/component-base` from 0.34.7 to 0.34.8
- [Commits](https://github.com/kubernetes/component-base/compare/v0.34.7...v0.34.8 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-version: 0.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-version: 0.34.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-19 06:36:29 +00:00
dependabot[bot] and GitHub
77f65b437a
chore(deps): bump the actions-all group with 2 updates
...
Bumps the actions-all group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `step-security/harden-runner` from 2.19.1 to 2.19.3
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/a5ad31d6a139d249332a2605b85202e8c0b78450...ab7a9404c0f3da075243ca237b5fac12c98deaa5 )
Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.19.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action
dependency-version: 4.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-19 06:36:20 +00:00
Kubernetes Prow Robot and GitHub
87bbc58e7e
Merge pull request #1280 from kubernetes/dependabot/github_actions/actions-all-085e74bc6a
...
chore(deps): bump the actions-all group with 2 updates
2026-05-12 10:48:12 +05:30
dependabot[bot] and GitHub
e715cf519e
chore(deps): bump the actions-all group with 2 updates
...
Bumps the actions-all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action ) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action ).
Updates `github/codeql-action` from 4.35.3 to 4.35.4
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e )
Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/2031cfc080254a8a887f58cffee85186f0e49e48...a1d282b36b6f3519aa1f3fc636f609c47dddb294 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: actions/dependency-review-action
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-12 03:51:55 +00:00
Andrew Halaney
31d036e27f
fix: handle SIGTERM gracefully on unix
...
We weren't catching SIGTERM and cancelling our context, so the go
runtime would have us exit with a non-zero code when the signal was
received. Let's catch it and try to exit gracefully.
i.e. before:
(...)
I0508 11:08:00.426917 1787442 log_monitor.go:237] Initialize condition generated: []
^C
$ echo $?
130
and now:
(...)
I0508 11:07:42.150562 1787146 log_monitor.go:237] Initialize condition generated: []
^C
I0508 11:07:43.372093 1787146 log_monitor.go:123] Stop log monitor /tmp/npd-test.json
I0508 11:07:43.652876 1787146 log_watcher.go:104] Stop watching filelog
I0508 11:07:43.652923 1787146 log_monitor.go:144] Log monitor stopped: /tmp/npd-test.json
$ echo $?
0
2026-05-08 11:14:38 -05:00
Kubernetes Prow Robot and GitHub
653620acfa
Merge pull request #1276 from kubernetes/dependabot/github_actions/actions-all-872c82b62f
...
chore(deps): bump the actions-all group with 2 updates
2026-05-06 08:36:21 +05:30
dependabot[bot] and GitHub
bf5ef5d152
chore(deps): bump the actions-all group with 2 updates
...
Bumps the actions-all group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `step-security/harden-runner` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/step-security/harden-runner/releases )
- [Commits](https://github.com/step-security/harden-runner/compare/8d3c67de8e2fe68ef647c8db1e6a09f647780f40...a5ad31d6a139d249332a2605b85202e8c0b78450 )
Updates `github/codeql-action` from 4.35.2 to 4.35.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7 )
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: github/codeql-action
dependency-version: 4.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-05 01:09:27 +00:00
Kubernetes Prow Robot and GitHub
f06e6faf79
Merge pull request #1272 from BrunoChauvet/fix/grype-vulnerabilities-logrus-prometheus
...
Fix CVEs and update builder image to golang:1.25.9
2026-05-04 11:13:38 +05:30
Bruno Chauvet
21e602edef
Update builder image to golang:1.25.9-bookworm
2026-05-03 10:09:38 -04:00
Bruno Chauvet
877b6d6908
Fix Grype CVEs: update logrus and prometheus/prometheus
...
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
2026-05-03 10:05:37 -04:00
Kubernetes Prow Robot and GitHub
45979bdf4e
Merge pull request #1270 from ajaysundark/cve-fix
...
Update grpc to v1.79.3 to fix CVE-2026-33186
2026-04-24 00:30:47 +05:30
Ajay Sundar Karuppasamy
e99d20b019
Align otel dependency with k8s v1.41.0
2026-04-23 18:13:03 +00:00
Ajay Sundar Karuppasamy
925c629e37
Run go mod tidy in test directory to fix e2e build
2026-04-23 18:10:45 +00:00
Ajay Sundar Karuppasamy
6464b9efac
Update grpc to v1.79.3 to fix CVE-2026-33186
2026-04-23 17:56:14 +00:00
Pierluigi Lenoci and Ciprian Hacman
0c927ad8ec
fix: honor stderrthreshold on Windows entrypoint
...
The Unix entrypoint already sets legacy_stderr_threshold_behavior=false
and stderrthreshold=INFO, but the Windows entrypoint was missed.
klog v2 defaults -logtostderr to true. When active, -stderrthreshold is
silently ignored — all log levels are unconditionally sent to stderr.
Setting legacy_stderr_threshold_behavior=false enables the fix so that
-stderrthreshold is honored even when -logtostderr=true.
Ref: kubernetes/klog#212 , kubernetes/klog#432
Signed-off-by: Pierluigi Lenoci <pierluigi.lenoci@gmail.com >
Signed-off-by: Pierluigi Lenoci <pierluigilenoci@gmail.com >
2026-04-23 11:53:08 +03:00
Kubernetes Prow Robot and GitHub
cc85ca1c59
Merge pull request #1264 from kubernetes/dependabot/github_actions/actions-all-d52dfeb8fb
...
chore(deps): bump the actions-all group across 1 directory with 2 updates
2026-04-22 18:11:52 +05:30