github/node-problem-detector
1
0
Fork 0
mirror of https://github.com/kubernetes/node-problem-detector.git synced 2026-08-19 20:26:32 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,227 Commits 12 Branches 59 Tags
d482a5096d2c77efc1d20ea6a0af88db73e7dc15
Commit Graph
1227 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ciprian HacmanandGitHub d482a5096d Release v1.34.4 (#1314) v1.34.4 2026-07-11 15:57:44 +00:00
kubernetes-prow[bot]andGitHub 1c7e714908 Merge pull request #1309 from hakman/fix-cves-release-1.34 
[release-1.34] Fix CVEs: debian-base bookworm-v1.0.8 and prometheus/prometheus v0.311.3
 2026-07-11 15:23:44 +00:00
Ciprian Hacman 6097eaba54 Bump github.com/prometheus/prometheus to v0.311.3 to fix CVEs 
The bump to v0.311.3 from commit 98e831b4 ("Fix Grype CVEs: update
logrus and prometheus/prometheus") was unintentionally reverted to
v0.35.0 by the go.mod conflict resolution in commit f844870a ("Run go
mod tidy and adapt to prometheus/common v0.67 API").

Re-apply it to fix CVE-2026-42154 (High), CVE-2026-40179 and
CVE-2026-44903 (Medium).

prometheus/prometheus v0.311.3 requires k8s.io/client-go v0.35.x,
which would drag the k8s.io modules past the v0.34 line this branch
must stay on. Pin k8s.io/api, k8s.io/apimachinery and k8s.io/client-go
back to v0.34.1 with replace directives in both the root and test
modules, so the built binaries keep using v0.34.1 (the replacement is
also what gets recorded in the binary build info).

The only prometheus/prometheus package linked into the NPD binaries is
model/value, so none of the k8s-facing prometheus code is compiled.
 2026-07-11 14:43:40 +03:00
dependabot[bot]andCiprian Hacman 32cf258519 chore(deps): bump build-image/debian-base 
Bumps build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8.

---
updated-dependencies:
- dependency-name: build-image/debian-base
  dependency-version: bookworm-v1.0.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 1d01ffae34)
 2026-07-11 10:23:46 +03:00
kubernetes-prow[bot]andGitHub 4014028983 Merge pull request #1301 from hakman/bump-go-1.26.5-release-1.34 
Bump Go to 1.26.5 and golang.org/x modules
 2026-07-08 09:26:30 +00:00
Ciprian Hacman 72aa6e0b1f test: deploy NPD for cluster e2e 
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
 2026-07-08 06:41:59 +03:00
Ciprian Hacman 0d78d21bd3 test: pull node e2e image from the community staging registry 2026-07-08 06:41:59 +03:00
Ciprian Hacman e9aeafb1bb Bump Go to 1.26.5 and golang.org/x modules 2026-07-07 23:42:13 +03:00
Kubernetes Prow RobotandGitHub 6e35e2930a Merge pull request #1274 from hakman/automated-cherry-pick-of-#1270-#1272-upstream-release-1.34 
Automated cherry pick of #1270: Update grpc to v1.79.3 to fix CVE-2026-33186
#1272: Fix Grype CVEs: update logrus and prometheus/prometheus
 2026-05-07 17:19:17 +05:30
Ciprian Hacman f844870ae3 Run go mod tidy and adapt to prometheus/common v0.67 API 2026-05-04 12:04:39 +03:00
Ciprian Hacman 5833635a1a Update golangci-lint to v2.11.4 2026-05-04 10:39:50 +03:00
Ciprian Hacman 1c2728c6f1 fix: pin actions to commit SHA 2026-05-04 10:39:50 +03:00
Bruno ChauvetandCiprian Hacman f6fff63ced Update builder image to golang:1.25.9-bookworm 2026-05-04 10:39:50 +03:00
Bruno ChauvetandCiprian Hacman 98e831b4f0 Fix Grype CVEs: update logrus and prometheus/prometheus 
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
  to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
  to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
 2026-05-04 10:39:49 +03:00
Ajay Sundar KaruppasamyandCiprian Hacman 524d0e23cb Align otel dependency with k8s v1.41.0 2026-05-04 10:39:49 +03:00
Ajay Sundar KaruppasamyandCiprian Hacman 07a4fc0e03 Run go mod tidy in test directory to fix e2e build 2026-05-04 10:39:48 +03:00
Ajay Sundar KaruppasamyandCiprian Hacman 99d9a8de92 Update grpc to v1.79.3 to fix CVE-2026-33186 2026-05-04 10:39:35 +03:00
Kubernetes Prow RobotandGitHub 56aafaf20e Merge pull request #1243 from hakman/automated-cherry-pick-of-#1241-upstream-release-1.34 
Automated cherry pick of #1241: Update Go to v1.25.8
 2026-03-07 18:46:03 +05:30
Ciprian Hacman 53955be730 Update Go to v1.25.8 2026-03-07 14:40:40 +02:00
Ciprian HacmanandGitHub c117573bdb Release v1.34.3 (#1231) v1.34.3 2026-02-11 00:50:02 +05:30
Kubernetes Prow RobotandGitHub 87d988600f Merge pull request #1226 from hakman/automated-cherry-pick-of-#1220-upstream-release-1.34 
Automated cherry pick of #1220: Update Go to v1.25.7
 2026-02-08 16:59:08 +05:30
Ciprian Hacman b0188f5697 Update Go to v1.25.7 2026-02-08 12:48:13 +02:00
Kubernetes Prow RobotandGitHub cd09f68b9f Merge pull request #1228 from hakman/automated-cherry-pick-of-#1180-upstream-release-1.34 
Automated cherry pick of #1180: Update golangci-lint to v2.6.2
 2026-02-08 15:19:07 +05:30
Kubernetes Prow RobotandGitHub 8120cf7047 Merge pull request #1222 from hakman/automated-cherry-pick-of-#1218-upstream-release-1.34 
Automated cherry pick of #1218: chore(deps): bump build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7
 2026-02-08 14:47:09 +05:30
Ciprian Hacman 92f2c2c4bc Update golangci-lint to v2.6.2 2026-02-08 10:37:20 +02:00
dependabot[bot]andCiprian Hacman 5c18b82d05 chore(deps): bump build-image/debian-base 
Bumps build-image/debian-base from bookworm-v1.0.6 to bookworm-v1.0.7.
 2026-02-08 10:07:07 +02:00
Ciprian HacmanandGitHub b2096f7022 Release 1.34.2 (#1207)
tag-release / tag (push) Has been skipped 
* Fix release tagging

* Release v1.34.2
v1.34.2 		2025-12-23 20:28:33 +05:30
Ciprian HacmanandGitHub 941d2ed6e5 Release v1.34.1 (#1202) v1.34.1 2025-12-23 16:54:33 +05:30
Kubernetes Prow RobotandGitHub 3681caff60 Merge pull request #1198 from hakman/automated-cherry-pick-of-#1183-#1187-upstream-release-1.34 
Automated cherry pick of #1183: Build Windows image
#1187: Fix typo in Windows build
 2025-12-23 13:04:31 +05:30
Ciprian Hacman eecebaae78 Fix typo in Windows build 2025-12-23 09:06:32 +02:00
Ciprian Hacman ddf4524e08 Build Windows image 2025-12-23 09:06:31 +02:00
Kubernetes Prow RobotandGitHub 331512d953 Merge pull request #1185 from hakman/automated-cherry-pick-of-#1184-upstream-release-1.34 
Automated cherry pick of #1184: Update Go to 1.24.11
 2025-12-02 23:52:19 -08:00
Ciprian Hacman 34394f71ce Update Go to 1.24.11 2025-12-03 08:09:13 +02:00
Kubernetes Prow RobotandGitHub c7c34aae5d Merge pull request #1178 from hakman/depup-1.34-crypto 
Update golang.org/x/crypto to v0.45.0
 2025-12-01 23:54:25 -08:00
Ciprian Hacman f96444ac81 Update golang.org/x/crypto to v0.45.0 2025-11-29 10:07:08 +02:00
Kubernetes Prow RobotandGitHub 04217f4240 Merge pull request #1169 from hakman/go-1.24.10 
Update Go to v1.24.10 for release-1.34
 2025-11-28 12:14:22 -08:00
Ciprian Hacman fd24ded035 Update Go to v1.24.10 2025-11-12 06:26:22 -05:00
Kubernetes Prow RobotandGitHub 2baac6c067 Merge pull request #1146 from hakman/automated-cherry-pick-of-#1144-upstream-release-1.34 
Automated cherry pick of #1144: Push additional stable image name to staging registry
 2025-09-28 21:00:16 -07:00
Ciprian Hacman 15eef08ba8 Push additional stable image name to staging registry 2025-09-29 06:35:17 +03:00
Ciprian HacmanandGitHub 714805c632 Release v1.34.0 (#1137)
tag-release / tag (push) Has been skipped
v1.34.0 		2025-09-26 11:04:18 -07:00
Kubernetes Prow RobotandGitHub 6135dd4d57 Merge pull request #1139 from hakman/go-1.24.7 
Update Go to v1.24.7 for release-1.34
 2025-09-25 22:38:15 -07:00
Ciprian Hacman 7fa08229de Update Go to v1.24.7 2025-09-26 08:03:49 +03:00
Kubernetes Prow RobotandGitHub 2eeb02e0b5 Merge pull request #1131 from kubernetes/dependabot/docker/build-image/debian-base-bookworm-v1.0.6
CodeQL / Analyze (go) (push) Failing after 32s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 26s 
chore(deps): bump build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6
 2025-09-22 22:30:14 -07:00
dependabot[bot]andGitHub ef5105423f chore(deps): bump build-image/debian-base 
Bumps build-image/debian-base from bookworm-v1.0.5 to bookworm-v1.0.6.

---
updated-dependencies:
- dependency-name: build-image/debian-base
  dependency-version: bookworm-v1.0.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-22 21:22:06 +00:00
Kubernetes Prow RobotandGitHub 0f8e0ea126 Merge pull request #1127 from kubernetes/dependabot/github_actions/actions-all-3c4e9906c8
CodeQL / Analyze (go) (push) Failing after 39s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 1m1s 
chore(deps): bump the actions-all group with 3 updates
 2025-09-15 15:52:07 -07:00
dependabot[bot]andGitHub 4a138e1ef8 chore(deps): bump the actions-all group with 3 updates 
Bumps the actions-all group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [github/codeql-action](https://github.com/github/codeql-action) and [actions/setup-go](https://github.com/actions/setup-go).


Updates `step-security/harden-runner` from 2.13.0 to 2.13.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/ec9f2d5744a09debf3a187a3f4f675c53b671911...f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a)

Updates `github/codeql-action` from 3.30.0 to 3.30.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d...192325c86100d080feab897ff886c34abd4c83a3)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-15 21:12:06 +00:00
Kubernetes Prow RobotandGitHub 21579f00ad Merge pull request #1124 from SergeyKanzhelev/morelinter
Scorecard supply-chain security / Scorecard analysis (push) Failing after 45s
CodeQL / Analyze (go) (push) Failing after 47s 
enabled a few more linter rules
 2025-09-12 05:16:08 -07:00
Ciprian HacmanGitHubSergey Kanzhelev
 		3fb81ae2fb Add hakman as an approver (#1121) 
* Add hakman as an approver

* Remove vteratipally

* Add emeritus

Co-authored-by: Sergey Kanzhelev <S.Kanzhelev@live.com>

* Update OWNERS

* Update OWNERS

---------

Co-authored-by: Sergey Kanzhelev <S.Kanzhelev@live.com>
 2025-09-12 02:18:10 -07:00
Sergey Kanzhelev 3e64800668 enabled a few more linter rules 2025-09-11 18:47:20 +00:00
Kubernetes Prow RobotandGitHub 0fe2979ff1 Merge pull request #1123 from hakman/update-cloud-build
CodeQL / Analyze (go) (push) Failing after 42s
Scorecard supply-chain security / Scorecard analysis (push) Failing after 27s 
Update Cloud Build config
 2025-09-11 09:44:14 -07:00