mirror of
https://github.com/kubernetes/node-problem-detector.git
synced 2026-08-20 12:46:37 +00:00
Ciprian Hacman
6097eaba54
The bump to v0.311.3 from commit98e831b4("Fix Grype CVEs: update logrus and prometheus/prometheus") was unintentionally reverted to v0.35.0 by the go.mod conflict resolution in commitf844870a("Run go mod tidy and adapt to prometheus/common v0.67 API"). Re-apply it to fix CVE-2026-42154 (High), CVE-2026-40179 and CVE-2026-44903 (Medium). prometheus/prometheus v0.311.3 requires k8s.io/client-go v0.35.x, which would drag the k8s.io modules past the v0.34 line this branch must stay on. Pin k8s.io/api, k8s.io/apimachinery and k8s.io/client-go back to v0.34.1 with replace directives in both the root and test modules, so the built binaries keep using v0.34.1 (the replacement is also what gets recorded in the binary build info). The only prometheus/prometheus package linked into the NPD binaries is model/value, so none of the k8s-facing prometheus code is compiled.
89 lines
3.6 KiB
AMPL
89 lines
3.6 KiB
AMPL
module k8s.io/node-problem-detector/test
|
|
|
|
go 1.26.5
|
|
|
|
replace k8s.io/node-problem-detector => ../.
|
|
|
|
require (
|
|
github.com/avast/retry-go/v4 v4.6.1
|
|
github.com/onsi/ginkgo v1.16.5
|
|
github.com/onsi/gomega v1.37.0
|
|
github.com/pborman/uuid v1.2.1
|
|
github.com/spf13/pflag v1.0.10
|
|
golang.org/x/crypto v0.53.0
|
|
golang.org/x/oauth2 v0.36.0
|
|
google.golang.org/api v0.272.0
|
|
k8s.io/apimachinery v0.35.3
|
|
k8s.io/component-base v0.34.1
|
|
k8s.io/klog/v2 v2.140.0
|
|
k8s.io/node-problem-detector v0.8.20
|
|
sigs.k8s.io/boskos v0.0.0-20250612085457-e9e53220ffb6
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go/auth v0.18.2 // indirect
|
|
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
|
|
cloud.google.com/go/compute/metadata v0.9.0 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/blang/semver/v4 v4.0.0 // indirect
|
|
github.com/bombsimon/logrusr/v4 v4.1.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/fsnotify/fsnotify v1.9.0 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/s2a-go v0.1.9 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.18.0 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
|
github.com/magiconair/properties v1.8.5 // indirect
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/nxadm/tail v1.4.8 // indirect
|
|
github.com/pelletier/go-toml v1.9.3 // indirect
|
|
github.com/prometheus/client_golang v1.23.2 // indirect
|
|
github.com/prometheus/client_model v0.6.2 // indirect
|
|
github.com/prometheus/common v0.67.5 // indirect
|
|
github.com/prometheus/procfs v0.19.2 // indirect
|
|
github.com/sirupsen/logrus v1.9.3 // indirect
|
|
github.com/spf13/afero v1.6.0 // indirect
|
|
github.com/spf13/cast v1.3.1 // indirect
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
|
github.com/spf13/viper v1.8.1 // indirect
|
|
github.com/subosito/gotenv v1.2.0 // indirect
|
|
go.opencensus.io v0.24.0 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
|
|
go.opentelemetry.io/otel v1.42.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.42.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.42.0 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go4.org v0.0.0-20201209231011-d4a079459e60 // indirect
|
|
golang.org/x/net v0.56.0 // indirect
|
|
golang.org/x/sys v0.46.0 // indirect
|
|
golang.org/x/text v0.39.0 // indirect
|
|
golang.org/x/tools v0.47.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260311181403-84a4fc48630c // indirect
|
|
google.golang.org/grpc v1.79.3 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
gopkg.in/ini.v1 v1.62.0 // indirect
|
|
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
|
|
sigs.k8s.io/controller-runtime v0.16.5 // indirect
|
|
sigs.k8s.io/prow v0.0.0-20240619181241-cfb8754e0459 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|
|
|
|
replace k8s.io/api => k8s.io/api v0.34.1
|
|
|
|
replace k8s.io/apimachinery => k8s.io/apimachinery v0.34.1
|
|
|
|
replace k8s.io/client-go => k8s.io/client-go v0.34.1
|