From faa23642f513b84b7d065817d1e5ce1930a6430d Mon Sep 17 00:00:00 2001
From: Mark Rossett <marosset@microsoft.com>
Date: Tue, 11 Feb 2025 15:44:06 -0800
Subject: [PATCH] Bump windows pause image base to
 mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.4.1

Signed-off-by: Mark Rossett <marosset@microsoft.com>
---
 build/pause/CHANGELOG.md | 4 ++++
 build/pause/Makefile     | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/build/pause/CHANGELOG.md b/build/pause/CHANGELOG.md
index adad9f66033..d60ed694bf9 100644
--- a/build/pause/CHANGELOG.md
+++ b/build/pause/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 3.10.1
+
+* Updating base image for Windows pause container to `mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.4.1` to pick up security fixes in the nanoserver base image. ([#130102](https://github.com/kubernetes/kubernetes/pull/130102), [@marosset](https://github.com/marosset))
+
 # 3.10
 
 * Add support for the -v flag on Windows. It prints the version similarly to Linux. ([#125067](https://github.com/kubernetes/kubernetes/pull/125067), [@neolit123](https://github.com/neolit123))
diff --git a/build/pause/Makefile b/build/pause/Makefile
index 3118302bca6..f423b590d3f 100644
--- a/build/pause/Makefile
+++ b/build/pause/Makefile
@@ -17,7 +17,7 @@
 REGISTRY ?= staging-k8s.gcr.io
 IMAGE = $(REGISTRY)/pause
 
-TAG ?= 3.10
+TAG ?= 3.10.1
 REV = $(shell git describe --contains --always --match='v*')
 
 # Architectures supported: amd64, arm, arm64, ppc64le and s390x
@@ -69,7 +69,7 @@ TRIPLE.linux-s390x := s390x-linux-gnu
 TRIPLE := ${TRIPLE.${OS}-${ARCH}}
 BASE.linux := scratch
 # Source for windows pause image base is located at https://github.com/microsoft/windows-pause-image-base
-BASE.windows := mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.2
+BASE.windows := mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.4.1
 BASE := ${BASE.${OS}}
 
 # If you want to build AND push all containers, see the 'all-push' rule.