chore: Cut v2.11.0 #2317
chore: Cut v2.11.0 #2317
Conversation
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.17.0 to 1.18.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.17.0...v1.18.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…les/github.com/prometheus/client_golang-1.18.0 build(deps): Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0
Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.110.1 to 2.120.1. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](kubernetes/klog@v2.110.1...v2.120.1) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…les/k8s.io/klog/v2-2.120.1 build(deps): Bump k8s.io/klog/v2 from 2.110.1 to 2.120.1
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.45.0 to 0.46.0. - [Release notes](https://github.com/prometheus/common/releases) - [Commits](prometheus/common@v0.45.0...v0.46.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…les/github.com/prometheus/common-0.46.0 build(deps): Bump github.com/prometheus/common from 0.45.0 to 0.46.0
Add the kube_secret_owner metric for Secrets. This metric already exists for several other Kubernetes primitives (Jobs, Pods, etc). Cluster operators will often use external secret stores with a controller to reconcile those secrets into Kubernetes Secrets. Cluster operators may wish to discourage manually managed secrets. Having the secret owner data in kube-state-metrics allows graphing and alerting on unmanaged secrets.
k8s-ci-robot
added
cncf-cla: yes
k8s-ci-robot
added
approved
|
|
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.46.0 to 0.47.0. - [Release notes](https://github.com/prometheus/common/releases) - [Commits](prometheus/common@v0.46.0...v0.47.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
Is there any plan to fix GHSA-5f94-vhjq-rpg8 and GHSA-vvjp-q62m-2vph CVE's with this release? Fix is to build with 1.21.5 or 1.21.12. |
rexagod
force-pushed
the
release-2.11
branch
2 times, most recently
from
95aa601 to
862fc32
Compare
|
/assign @dgrisonnet |
k8s-ci-robot
added
triage/accepted
…les/github.com/prometheus/common-0.47.0 build(deps): Bump github.com/prometheus/common from 0.46.0 to 0.47.0
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.5.0 to 0.6.0. - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.5.0...v0.6.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_model dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…les/github.com/prometheus/client_model-0.6.0 build(deps): Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0
feat: add kube_secret_owner metric
|
when is the plan to release this version? |
Co-authored-by: Pranshu Srivastava <prasriva@redhat.com>
…-format style: fix broken markdown format
|
Can you fix the markdown lint and rebase the release-2.11 branch on main first to reduce the delta to a minimum (that will help with merging it back)? release-2.11...main |
|
Also I would suggest to wait for tomorrow until go 1.21.8 is released, see: https://groups.google.com/g/golang-announce/c/smSYdsWaO4o |
rexagod
force-pushed
the
release-2.11
branch
2 times, most recently
from
ba46a3c to
ce23b82
Compare
rexagod
force-pushed
the
release-2.11
branch
2 times, most recently
from
628ed26 to
785a0b5
Compare
Blocked by kubernetes#2316. Signed-off-by: Pranshu Srivastava <rexagod@gmail.com>
|
/lgtm /hold |
k8s-ci-robot
added
the
do-not-merge/hold
k8s-ci-robot
added
the
lgtm
|
@dgrisonnet I believe this is good to go in now, but seeing as #2270 (comment) might be an |
|
/unhold Will include #2270 in the next release, going forward with this one since this has been in the pipeline for a while. |
|
@rexagod: you cannot LGTM your own PR. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
k8s-ci-robot
removed
the
do-not-merge/hold
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: mrueg, rexagod The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Signed-off-by: Pranshu Srivastava rexagod@gmail.com
Fixes #2293