Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

node-problem-detector/0.8.14 package update #4840

Merged
merged 2 commits into from
Aug 27, 2023

Conversation

wolfi-bot
Copy link
Contributor

@wolfi-bot wolfi-bot requested a review from a team as a code owner August 26, 2023 17:07
@wolfi-bot wolfi-bot added request-version-update request for a newer version of a package automated pr labels Aug 26, 2023
Upstream has updates for the following go dependencies 
 
      go get -u github.com/aws/aws-sdk-go@v1.34.0
	    github.com/aws/aws-sdk-go v1.35.24 // indirect
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L44

      # Mitigate GHSA-3vm4-22fp-5rfm, GHSA-gwc9-m7rh-j2ww and GHSA-8c26-wmh5-6g9v
      go get -u golang.org/x/crypto@1baeb1ce4c0b
      golang.org/x/crypto v0.10.0
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L27C1-L27C29


      # Mitigate GHSA-69cg-p879-7622 GHSA-fxg5-wq6x-vr4w and GHSA-vvpx-j8f3-3w6h
      go get -u golang.org/x/text@v0.3.8
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L81
      golang.org/x/text v0.10.0

      # Mitigate GHSA-h86h-8ppg-mxmhm, GHSA-83g2-8m93-v3w7, GHSA-69cg-p879-7622 and GHSA-vvpx-j8f3-3w6h
      go get -u golang.org/x/net@v0.10.0
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L81
      golang.org/x/net v0.11.0

      # GHSA-c3h9-896r-86jm
      go get -u github.com/gogo/protobuf@v1.3.2
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L53C2-L53C33
      github.com/gogo/protobuf v1.3.2

      # Mitigate CVE-2022-21698, GHSA-cg3q-j54f-5p7p
      go get github.com/prometheus/client_golang@v1.11.1
      https://github.com/kubernetes/node-problem-detector/blob/master/go.mod#L72C2-L72C46
      github.com/prometheus/client_golang v1.14.0 

Signed-off-by: Ajay Kemparaj <ajaykemparaj@gmail.com>
@github-actions
Copy link
Contributor

Package node-problem-detector-compat: Click to expand/collapse

Package node-problem-detector-compat:
Unchanged

Package node-problem-detector: Click to expand/collapse

Package node-problem-detector:
Modified: /usr/bin/node-problem-detector

Package health-checker: Click to expand/collapse

Package health-checker:
Modified: /usr/bin/health-checker

Package log-counter: Click to expand/collapse

Package log-counter:
Modified: /usr/bin/log-counter

@dlorenc dlorenc added this pull request to the merge queue Aug 27, 2023
Merged via the queue into main with commit 224740b Aug 27, 2023
@dlorenc dlorenc deleted the wolfictl-506234be-1787-4987-abe3-6578c85b58fe branch August 27, 2023 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants