Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from kserve:master #162

Merged
merged 10 commits into from
Jan 15, 2024
Merged

Commits on Jan 6, 2024

  1. Handles s3 download for object name starts with folder name. (#3205)

    * Handles s3 download for object name starts with folder name.
    
    Signed-off-by: Andrews Arokiam <andrews.arokiam@ideas2it.com>
    
    * Fix storage test.
    
    Signed-off-by: Andrews Arokiam <andrews.arokiam@ideas2it.com>
    
    * Added s3 storage test.
    
    Signed-off-by: Andrews Arokiam <andrews.arokiam@ideas2it.com>
    
    * Simplified logic
    
    Signed-off-by: Andrews Arokiam <andrews.arokiam@ideas2it.com>
    
    ---------
    
    Signed-off-by: Andrews Arokiam <andrews.arokiam@ideas2it.com>
    andyi2it authored Jan 6, 2024
    Configuration menu
    Copy the full SHA
    f5bc96e View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2024

  1. chore: Remove unused timeout annotation and flag in batcher (#3341)

    * fix: Add missing --timeout flag in batcher
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * removal
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    ---------
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    terrytangyuan authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    53dcf51 View commit details
    Browse the repository at this point in the history
  2. ci: Automate release process (#3345)

    * ci: Automate release process
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Update changes to release branch
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * update
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Push tag
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * udpate
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Split wf
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * monitor tags
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * fix
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Use softprops/action-gh-release
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Update automated-release.yml
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    ---------
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    terrytangyuan authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    e259265 View commit details
    Browse the repository at this point in the history
  3. fixes critical vulnerabilities on ray (#3285)

    fixes critical vulnerabiolities on ray
    
    chore: 	fix the following CVEs
    	- [CVE-2023-6019](https://www.cve.org/CVERecord?id=CVE-2023-6019): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    	- [CVE-2023-6020](https://www.cve.org/CVERecord?id=CVE-2023-6020): Use of GET Request Method With Sensitive Query Strings
    
    There are no fix for [CVE-2023-48023](https://www.cve.org/CVERecord?id=CVE-2023-48023) yet
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    spolti authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    ba85a4f View commit details
    Browse the repository at this point in the history
  4. chore: Bump versions to prepare v0.12.0-rc1 release (#3352)

    * Bump versions
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    * Bump versions
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    
    ---------
    
    Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
    terrytangyuan authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    ec5b92b View commit details
    Browse the repository at this point in the history

Commits on Jan 10, 2024

  1. Change version for helm charts in README (#3353)

    Signed-off-by: Pitos <contact@gawsoft.com>
    gawsoftpl authored Jan 10, 2024
    Configuration menu
    Copy the full SHA
    8cbf1b6 View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2024

  1. Fixes CVE-2023-48795 (#3354)

    * Fixes CVE-2023-48795
    
    chore: Fixes [CVE-2023-48795](https://www.cve.org/CVERecord?id=CVE-2023-48795) - golang.org/x/crypto Authentication Bypass by Capture-replay
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    
    * review - run go mod tidy
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    
    ---------
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    spolti authored Jan 12, 2024
    Configuration menu
    Copy the full SHA
    1548604 View commit details
    Browse the repository at this point in the history
  2. Fix Stack-based Buffer Overflow on protobuf (#3358)

    Fix Stack-based Buffer Overflow on protobuf
    
    chore: Fix Stack-based Buffer Overflow on protobuf on protobuf
    - https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    spolti authored Jan 12, 2024
    Configuration menu
    Copy the full SHA
    8357567 View commit details
    Browse the repository at this point in the history

Commits on Jan 13, 2024

  1. Update knative-serving (#3362)

    chore:	The purpose of this pull request is to addres [this](https://security.snyk.io/vuln/SNYK-GOLANG-KNATIVEDEVSERVINGPKGAUTOSCALERMETRICS-6091906) vulnerability.
    	In the Snyk report it says that the version 0.39.3 still affected, however it seems to be a false positive, since the fix can be found merged
    	as this [commit](knative/serving@fff40ef) shows.
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    spolti authored Jan 13, 2024
    Configuration menu
    Copy the full SHA
    48aa854 View commit details
    Browse the repository at this point in the history
  2. Fixes vulnerabilities on the otelhttp dependency (#3361)

    chore: Fixes the following vulnerabilities in the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency:
    - [CVE-2022-21698](https://www.cve.org/CVERecord?id=CVE-2022-21698) / [CVE-2023-45142](https://www.cve.org/CVERecord?id=CVE-2023-45142): Allocation of Resources Without Limits or Throttling
    
    Signed-off-by: Spolti <fspolti@redhat.com>
    spolti authored Jan 13, 2024
    Configuration menu
    Copy the full SHA
    c527535 View commit details
    Browse the repository at this point in the history