mirror of
https://github.com/kubernetes/node-problem-detector.git
synced 2026-08-20 12:46:37 +00:00
Ciprian Hacman
6097eaba54
The bump to v0.311.3 from commit98e831b4("Fix Grype CVEs: update logrus and prometheus/prometheus") was unintentionally reverted to v0.35.0 by the go.mod conflict resolution in commitf844870a("Run go mod tidy and adapt to prometheus/common v0.67 API"). Re-apply it to fix CVE-2026-42154 (High), CVE-2026-40179 and CVE-2026-44903 (Medium). prometheus/prometheus v0.311.3 requires k8s.io/client-go v0.35.x, which would drag the k8s.io modules past the v0.34 line this branch must stay on. Pin k8s.io/api, k8s.io/apimachinery and k8s.io/client-go back to v0.34.1 with replace directives in both the root and test modules, so the built binaries keep using v0.34.1 (the replacement is also what gets recorded in the binary build info). The only prometheus/prometheus package linked into the NPD binaries is model/value, so none of the k8s-facing prometheus code is compiled.
124 lines
5.6 KiB
AMPL
124 lines
5.6 KiB
AMPL
module k8s.io/node-problem-detector
|
|
|
|
go 1.26.5
|
|
|
|
require (
|
|
cloud.google.com/go/compute/metadata v0.9.0
|
|
contrib.go.opencensus.io/exporter/prometheus v0.4.2
|
|
contrib.go.opencensus.io/exporter/stackdriver v0.13.14
|
|
github.com/acobaugh/osrelease v0.1.0
|
|
github.com/avast/retry-go/v4 v4.6.1
|
|
github.com/coreos/go-systemd/v22 v22.6.0
|
|
github.com/euank/go-kmsg-parser v2.0.0+incompatible
|
|
github.com/hpcloud/tail v1.0.0
|
|
github.com/prometheus/client_model v0.6.2
|
|
github.com/prometheus/common v0.67.5
|
|
github.com/prometheus/procfs v0.17.0
|
|
github.com/shirou/gopsutil/v4 v4.25.8
|
|
github.com/spf13/pflag v1.0.10
|
|
github.com/stretchr/testify v1.11.1
|
|
go.opencensus.io v0.24.0
|
|
golang.org/x/sys v0.46.0
|
|
google.golang.org/api v0.272.0
|
|
k8s.io/api v0.35.3
|
|
k8s.io/apimachinery v0.35.3
|
|
k8s.io/client-go v0.35.3
|
|
k8s.io/klog/v2 v2.140.0
|
|
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go/auth v0.18.2 // indirect
|
|
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
|
|
cloud.google.com/go/monitoring v1.24.3 // indirect
|
|
cloud.google.com/go/trace v1.11.7 // indirect
|
|
github.com/aws/aws-sdk-go v1.55.7 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/census-instrumentation/opencensus-proto v0.4.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/ebitengine/purego v0.9.1 // indirect
|
|
github.com/emicklei/go-restful/v3 v3.12.2 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/fxamacker/cbor/v2 v2.9.0 // indirect
|
|
github.com/go-kit/log v0.2.1 // indirect
|
|
github.com/go-logfmt/logfmt v0.5.1 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-ole/go-ole v1.2.6 // indirect
|
|
github.com/go-openapi/jsonpointer v0.22.5 // indirect
|
|
github.com/go-openapi/jsonreference v0.21.4 // indirect
|
|
github.com/go-openapi/swag v0.25.5 // indirect
|
|
github.com/go-openapi/swag/cmdutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/conv v0.25.5 // indirect
|
|
github.com/go-openapi/swag/fileutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/jsonname v0.25.5 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/loading v0.25.5 // indirect
|
|
github.com/go-openapi/swag/mangling v0.25.5 // indirect
|
|
github.com/go-openapi/swag/netutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.25.5 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.25.5 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
|
github.com/google/gnostic-models v0.7.0 // indirect
|
|
github.com/google/s2a-go v0.1.9 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.18.0 // indirect
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
|
|
github.com/prometheus/client_golang v1.23.2 // indirect
|
|
github.com/prometheus/prometheus v0.311.3 // indirect
|
|
github.com/prometheus/statsd_exporter v0.22.7 // indirect
|
|
github.com/tklauser/go-sysconf v0.3.16 // indirect
|
|
github.com/tklauser/numcpus v0.11.0 // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
github.com/yusufpapurcu/wmi v1.2.4 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
|
|
go.opentelemetry.io/otel v1.42.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.42.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.42.0 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
golang.org/x/crypto v0.53.0 // indirect
|
|
golang.org/x/net v0.56.0 // indirect
|
|
golang.org/x/oauth2 v0.36.0 // indirect
|
|
golang.org/x/sync v0.21.0 // indirect
|
|
golang.org/x/term v0.44.0 // indirect
|
|
golang.org/x/text v0.39.0 // indirect
|
|
golang.org/x/time v0.15.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20260217215200-42d3e9bedb6d // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20260319201613-d00831a3d3e7 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260311181403-84a4fc48630c // indirect
|
|
google.golang.org/grpc v1.79.3 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
|
|
gopkg.in/fsnotify.v1 v1.4.7 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
|
|
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
|
|
sigs.k8s.io/randfill v1.0.0 // indirect
|
|
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|
|
|
|
replace k8s.io/api => k8s.io/api v0.34.1
|
|
|
|
replace k8s.io/apimachinery => k8s.io/apimachinery v0.34.1
|
|
|
|
replace k8s.io/client-go => k8s.io/client-go v0.34.1
|