Bruno Chauvet and Ciprian Hacman
97bb2fbb44
Fix Grype CVEs: update logrus and prometheus/prometheus
...
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
2026-05-04 10:45:24 +03:00
Ajay Sundar Karuppasamy and Ciprian Hacman
255c6e602c
Align otel dependency with k8s v1.41.0
2026-05-04 10:45:23 +03:00
Ajay Sundar Karuppasamy and Ciprian Hacman
9aad1d3005
Update grpc to v1.79.3 to fix CVE-2026-33186
2026-05-04 10:45:22 +03:00
Ciprian Hacman
8d92b98ad0
Update Go to v1.25.8
2026-03-07 14:43:36 +02:00
Ciprian Hacman
3b2cfb4b41
Update Go to v1.25.7
2026-02-08 12:49:42 +02:00
Ciprian Hacman
8081c2e486
Update golang.org/x/crypto to v0.45.0
2025-11-29 10:14:27 +02:00
Ciprian Hacman
81f66dc4b5
Update Go to v1.24.10
2025-11-12 07:07:45 -05:00
Sergey Kanzhelev
db7eb8366c
updated gopsutil
2025-08-13 21:53:17 +00:00
Ciprian Hacman
ffaefd99ac
Update dependencies
2025-08-10 07:59:08 +03:00
Ciprian Hacman and Ciprian Hacman
0147098968
Update dependencies
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev >
Signed-off-by: Ciprian Hacman <chacman@microsoft.com >
2025-04-28 17:41:41 +03:00
Ciprian Hacman and Ciprian Hacman
0f1ee66855
Update dependencies
...
Signed-off-by: Ciprian Hacman <chacman@microsoft.com >
2025-04-14 16:52:20 +03:00
dependabot[bot] and GitHub
59c46ad62c
chore(deps): bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.31.6 to 0.31.7
- [Commits](https://github.com/kubernetes/api/compare/v0.31.6...v0.31.7 )
Updates `k8s.io/apimachinery` from 0.31.6 to 0.31.7
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.6...v0.31.7 )
Updates `k8s.io/client-go` from 0.31.6 to 0.31.7
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.6...v0.31.7 )
Updates `k8s.io/apimachinery` from 0.31.6 to 0.31.7
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.6...v0.31.7 )
Updates `k8s.io/component-base` from 0.29.14 to 0.29.15
- [Commits](https://github.com/kubernetes/component-base/compare/v0.29.14...v0.29.15 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-24 22:00:26 +00:00
Kubernetes Prow Robot and GitHub
e8b584ab52
Merge pull request #1019 from kubernetes/dependabot/go_modules/github.com/spf13/pflag-1.0.6
...
chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
2025-03-10 16:39:48 -07:00
Dave Young
f24ca57199
chore(go.mod): update deps for high cves #994
2025-03-10 16:48:56 -05:00
dependabot[bot] and GitHub
2707945338
chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
...
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag ) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spf13/pflag/releases )
- [Commits](https://github.com/spf13/pflag/compare/v1.0.5...v1.0.6 )
---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-10 21:41:12 +00:00
Kubernetes Prow Robot and GitHub
7ea55106c2
Merge pull request #1030 from kubernetes/dependabot/go_modules/github.com/avast/retry-go/v4-4.6.1
...
Scorecard supply-chain security / Scorecard analysis (push) Failing after 41s
CodeQL / Analyze (go) (push) Failing after 3m22s
chore(deps): bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1
2025-03-07 14:53:52 -08:00
dependabot[bot] and GitHub
416ec8b3c2
chore(deps): bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.31.4 to 0.31.6
- [Commits](https://github.com/kubernetes/api/compare/v0.31.4...v0.31.6 )
Updates `k8s.io/apimachinery` from 0.31.4 to 0.31.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.4...v0.31.6 )
Updates `k8s.io/client-go` from 0.31.4 to 0.31.6
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.4...v0.31.6 )
Updates `k8s.io/apimachinery` from 0.31.4 to 0.31.6
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.4...v0.31.6 )
Updates `k8s.io/component-base` from 0.29.12 to 0.29.14
- [Commits](https://github.com/kubernetes/component-base/compare/v0.29.12...v0.29.14 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-03 21:57:13 +00:00
dependabot[bot] and GitHub
7cb27449aa
chore(deps): bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1
...
Bumps [github.com/avast/retry-go/v4](https://github.com/avast/retry-go ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/avast/retry-go/releases )
- [Commits](https://github.com/avast/retry-go/compare/4.6.0...4.6.1 )
---
updated-dependencies:
- dependency-name: github.com/avast/retry-go/v4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-27 05:08:00 +00:00
dependabot[bot] and GitHub
d99fca5f0a
Bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.31.3 to 0.31.4
- [Commits](https://github.com/kubernetes/api/compare/v0.31.3...v0.31.4 )
Updates `k8s.io/apimachinery` from 0.31.3 to 0.31.4
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.3...v0.31.4 )
Updates `k8s.io/client-go` from 0.31.3 to 0.31.4
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.3...v0.31.4 )
Updates `k8s.io/apimachinery` from 0.31.3 to 0.31.4
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.3...v0.31.4 )
Updates `k8s.io/component-base` from 0.29.11 to 0.29.12
- [Commits](https://github.com/kubernetes/component-base/compare/v0.29.11...v0.29.12 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-16 21:34:00 +00:00
dependabot[bot] and GitHub
b92aae803d
Bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.31.2 to 0.31.3
- [Commits](https://github.com/kubernetes/api/compare/v0.31.2...v0.31.3 )
Updates `k8s.io/apimachinery` from 0.31.2 to 0.31.3
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.2...v0.31.3 )
Updates `k8s.io/client-go` from 0.31.2 to 0.31.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.2...v0.31.3 )
Updates `k8s.io/apimachinery` from 0.31.2 to 0.31.3
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.2...v0.31.3 )
Updates `k8s.io/component-base` from 0.29.10 to 0.29.11
- [Commits](https://github.com/kubernetes/component-base/compare/v0.29.10...v0.29.11 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-25 21:51:35 +00:00
dependabot[bot] and GitHub
68a97cf4cb
Bump the k8s group across 2 directories with 4 updates
...
Bumps the k8s group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Bumps the k8s group with 2 updates in the /test directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/component-base](https://github.com/kubernetes/component-base ).
Updates `k8s.io/api` from 0.31.1 to 0.31.2
- [Commits](https://github.com/kubernetes/api/compare/v0.31.1...v0.31.2 )
Updates `k8s.io/apimachinery` from 0.31.1 to 0.31.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.1...v0.31.2 )
Updates `k8s.io/client-go` from 0.31.1 to 0.31.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.1...v0.31.2 )
Updates `k8s.io/apimachinery` from 0.31.1 to 0.31.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.1...v0.31.2 )
Updates `k8s.io/component-base` from 0.29.9 to 0.29.10
- [Commits](https://github.com/kubernetes/component-base/compare/v0.29.9...v0.29.10 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/component-base
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-28 21:49:45 +00:00
Ciprian Hacman
f0c5cd5d20
Update cloud.google.com/go/compute/metadata to v0.5.2
2024-10-12 06:31:04 +03:00
dependabot[bot] and GitHub
9ed6527f0a
Bump the k8s group with 3 updates
...
Bumps the k8s group with 3 updates: [k8s.io/api](https://github.com/kubernetes/api ), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Updates `k8s.io/api` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/api/compare/v0.31.0...v0.31.1 )
Updates `k8s.io/apimachinery` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.0...v0.31.1 )
Updates `k8s.io/client-go` from 0.31.0 to 0.31.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.0...v0.31.1 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/apimachinery
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
- dependency-name: k8s.io/client-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-18 17:02:05 +00:00
github-actions
be9ba585dd
Update dependencies
2024-08-16 06:06:29 +00:00
github-actions
289f11b28f
Update dependencies
2024-08-09 06:06:34 +00:00
github-actions
1fbfdfd4f7
Update dependencies
2024-08-02 06:07:33 +00:00
github-actions
c0bccb7c76
Update dependencies
2024-07-19 06:06:26 +00:00
github-actions
7a48ce2e38
Update dependencies
2024-06-07 06:06:34 +00:00
github-actions
09bbaa9c32
Update dependencies
2024-05-17 06:06:00 +00:00
github-actions
5f59f438ac
Update dependencies
2024-05-10 06:05:45 +00:00
github-actions
338430f835
Update dependencies
2024-05-03 06:05:43 +00:00
github-actions
273c3f5266
Update dependencies
2024-04-26 06:05:56 +00:00
github-actions
7d81d8e12a
Update dependencies
2024-04-19 06:06:22 +00:00
github-actions
e4f8f268e8
Update dependencies
2024-04-12 06:05:27 +00:00
github-actions
098d5ba360
Update dependencies
2024-04-05 06:05:40 +00:00
github-actions
6c34d567d4
Update dependencies
2024-04-03 22:17:34 +00:00
github-actions
7ed9c90baf
Update dependencies
2024-03-29 06:05:27 +00:00
github-actions
10378c8b11
Update dependencies
2024-03-25 21:18:45 +00:00
Ciprian Hacman
9769baefb9
Update dependencies
2024-03-06 07:12:46 +02:00
Ciprian Hacman
08b2255c33
Update dependencies
2024-02-28 06:27:06 +02:00
Ciprian Hacman
ef98b9612e
Update dependencies
2024-02-04 06:24:27 +02:00
Mike Miranda
689a066c90
Bump google.golang.org/grpc to v1.57.1
2024-01-18 22:10:45 +00:00
acumino
73a120de57
bump k8s.io to 0.29.0
2023-12-15 13:10:06 +05:30
Ciprian Hacman
a5aadf719a
Update github.com/avast/retry-go to v4.5.0
2023-09-24 11:25:19 +02:00
Ciprian Hacman
fdd522a951
Update github.com/coreos/go-systemd to v22.5.0
2023-09-20 07:13:42 +03:00
Ciprian Hacman
65e4aa3c5e
Remove dependency on code.cloudfoundry.org/clock
2023-09-19 12:50:29 +03:00
Ciprian Hacman
5210373640
Init useful flags for klog/v2
2023-09-17 11:00:42 +03:00
Manuel Rüger and Ciprian Hacman
e43459d86d
Move glog/klog logging to klog/v2
2023-09-17 08:57:33 +03:00
Fan Shang Xiang
8283e091cd
bump k8s.io/client-go to 1.28.2
2023-09-14 06:22:49 +00:00
Ciprian Hacman
9ad24ea2c7
Move test dependencies to test dir
2023-09-11 21:14:19 +03:00