github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-22 09:40:07 +00:00
Code Issues Projects Releases Wiki Activity
134,908 Commits 42 Branches 9,765 Tags
d800e7e052d4e5d71fb0046fe591e4dcb0c9ebcd
Commit Graph

117 Commits

Author SHA1 Message Date
Davanum Srinivas
5b478645cd Update security and stability dependencies 
This PR updates several dependencies addressing security vulnerabilities,
stability fixes, and authentication improvements.

- golang.org/x/crypto: v0.46.0 -> v0.47.0
  - Includes latest X509 root certificate bundle updates
  - Security hardening for cryptographic operations
  - Foundation dependency for TLS and authentication

- github.com/golang-jwt/jwt/v5: v5.2.2 -> v5.3.0
  - IMPORTANT: v5.2.2 patched vulnerability GHSA-mh63-6h87-95cp (token
    validation security issue) - this update ensures we have the fix
  - Adds multiple audience validation support for JWT tokens
  - Go 1.21 minimum requirement (code modernization)
  - Replaced legacy interface{} with modern any keyword

- golang.org/x/net: v0.48.0 -> v0.49.0
  - HTTP/2 priority scheduler improvements (RFC 9218)
  - WebSocket security enhancements
  - Network layer stability fixes

- go.uber.org/zap: v1.27.0 -> v1.27.1
  - Fix: Prevent Object from panicking on nils (PR #1501)
  - Fix: Race condition in WithLazy (PR #1511)
  - Both fixes improve logging stability in concurrent scenarios

- github.com/godbus/dbus/v5: v5.2.0 -> v5.2.2
  - Security: Disabled SHA1 authentication by default on non-Windows
    platforms (v5.2.0 change now inherited)
  - Performance: Multiple optimizations reducing memory allocations
  - Fix: Alignment issues in decoder operations
  - Fix: Allow more than 32 containers/struct fields in a signature

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-15 19:57:11 -05:00
Davanum Srinivas
050c786014 Update vendored dependencies: cadvisor, containerd, runtime-spec, selinux 
Update the following vendored dependencies:

- github.com/google/cadvisor: v0.55.1 -> v0.56.0
- github.com/containerd/containerd/api: v1.9.0 -> v1.10.0
- github.com/opencontainers/runtime-spec: v1.2.1 -> v1.3.0
- github.com/opencontainers/selinux: v1.13.0 -> v1.13.1

cadvisor v0.56.0 changes:
- Add s390x (IBM Z/mainframe) CPU topology support with NumBooks and
  NumDrawers fields in MachineInfo
- Add new Prometheus metrics: machine_cpu_books and machine_cpu_drawers
- Add standard deviation (Std) field to Percentiles for resource statistics
- Add sysfs constants CPUBookID and CPUDrawerID for s390x topology detection

containerd/api v1.10.0 changes:
- Add ActiveMount message type for tracking mounts with timestamps
- Add ActivationInfo message for mount management and lifecycle tracking

runtime-spec v1.3.0 changes (from ChangeLog):
- Add FreeBSD platform support with new Spec.FreeBSD field
- Add netDevices object for moving network devices to container namespaces
- Add memoryPolicy object for NUMA memory policy configuration
- Add hwConfig object for VM-based containers (vcpus, memory, device-tree)
- Add iomems for hardware I/O memory page access in VMs
- Add intelRdt.schemata and intelRdt.enableMonitoring fields
- Change LinuxPids.Limit to pointer type for optional handling
- Clarify intelRdt configuration and pids cgroup settings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-15 10:26:13 -05:00
Davanum Srinivas
13f7fbd04c Pin versions of dbus and otelgrpc to avoid breakage 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-12-20 15:03:27 -05:00
Davanum Srinivas
ab1ffaf12e move httpcache to third_party/forked 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-12-18 08:18:57 -05:00
Kubernetes Prow Robot
5eecce635d Merge pull request #135748 from princepereira/ppereira-vendoring-hnslib-v012 
Update vendored hnslib to v0.1.2
 2025-12-18 02:10:30 -08:00
Prince Pereira
832e342c01 Update vendored hnslib to v0.1.2 2025-12-16 12:50:35 +00:00
Davanum Srinivas
1240604ebf Drop usages of archived dependency - github.com/grpc-ecosystem/go-grpc-prometheus 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-12-01 20:53:55 -05:00
Patrick Ohly
6034321603 dependencies: ginkgo v2.27.2, gomega v1.38.2 
Specifically the new AddTreeConstructionNodeArgsTransformer and SpecPriority in
Ginkgo will be useful.

Gomega gets updated to keep up-to-date.
 2025-11-01 09:52:09 +01:00
Jordan Liggitt
7f58bb9abd Regenerate vendor 2025-10-08 14:28:41 -04:00
Jordan Liggitt
a87068c685 Clean up gogo dependency tracking 2025-09-23 13:59:37 -04:00
Davanum Srinivas
bdfca587f4 update prometheus' client_golang and common packages 2025-09-09 15:43:08 -04:00
Kubernetes Prow Robot
d5065bdf19 Merge pull request #133430 from liggitt/json-patch-v4-errors 
bump gopkg.in/evanphx/json-patch.v4
 2025-08-30 07:17:08 -07:00
Sascha Grunert
fd2d2fd66f Convert k8s.io/kubelet/pkg/apis/dra from gogo to protoc 
Use standard protoc for the dra instead of gogo.

Part of kubernetes#96564

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2025-08-29 09:40:51 +02:00
Jordan Liggitt
9f8d9432e2 bump gopkg.in/evanphx/json-patch.v4 2025-08-29 00:31:11 -04:00
Stephen Kitt
684473af62 Bump cadvisor to 0.53 
This brings a few fixes, drops github.com/pkg/errors (as a direct
dependency), and bumps many transitive dependencies. The
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp bump to
v0.61.0 breaks "k8s.io/kubernetes/test/integration/apiserver: tracing"
consistently, so it's held back for now.

github.com/containerd/containerd/api pulls in gopkg.in/yaml.v3 so that
needs to be added to the exceptions in unwanted-dependencies.json.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2025-08-28 09:20:21 +02:00
koba1t
ee8ef383be Update kubectl kustomize to kyaml/v0.20.1, cmd/config/v0.20.1, api/v0.20.1, kustomize/v5.7.1 2025-07-23 22:37:19 +09:00
Kubernetes Prow Robot
5df27c4922 Merge pull request #132833 from saschagrunert/kms-gogo 
Convert `k8s.io/kms/apis` from gogo to protoc
 2025-07-16 12:12:24 -07:00
Sascha Grunert
8e6651520e Convert k8s.io/kms/apis from gogo to protoc 
Use standard protoc for the kms APIs instead of gogo.

Part of kubernetes#96564

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2025-07-16 16:46:39 +02:00
Davanum Srinivas
ebc1ccc491 Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b) 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-07-14 07:24:48 -04:00
Sascha Grunert
841886df76 Convert externaljwt from gogo to protoc 
Use standard protoc for the `externaljwt` package instead of gogo.

Part of https://github.com/kubernetes/kubernetes/issues/96564

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2025-07-08 08:08:30 +02:00
Sascha Grunert
b464bbeb8f Remove gogo-protobuf from CRI 
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2025-07-04 08:55:57 +02:00
Jefftree
ec6471f63e Remove gnostic-models gopkg.in/yaml.v3 unwanted dependency 2025-07-01 15:56:40 +00:00
Kubernetes Prow Robot
8d2a5a2c9c Merge pull request #132499 from liggitt/unwanted-json-patch-v5 
Add json-patch v4 compatibility test
 2025-06-24 09:54:35 -07:00
Stephen Kitt
2ca4ffe653 Add evanphx/json-patch/v5 to unwanted dependencies 
This comes up periodically; bumping to v5 introduces issues with
replace operations in JSON patches. k/k relies on non-RFC-compliant
operations which v5 no longer allows.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2025-06-24 09:18:04 -04:00
Davanum Srinivas
5a2844a766 Update to etcd v3.6.1 in vendor/ 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-06-11 16:46:03 -04:00
Stephen Kitt
d1bddfd779 Forbid github.com/pkg/errors in k/k 
kubeadm has replaced pkg/errors with an internal implementation, which
means that pkg/errors can be marked as unwanted (once a final
straggler is replaced).

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2025-06-05 18:03:56 +03:00
Kubernetes Prow Robot
d9c1b4ec9b Merge pull request #131951 from dims/drop-usages-of-deprecated-otelgrpc-methods 
Drop usages of deprecated otelgrpc methods (update to v0.60.0)
 2025-05-27 10:18:26 -07:00
Kubernetes Prow Robot
4c2a741aac Merge pull request #131964 from skitt/kubectl-pkg-errors 
kubectl: drop dependency on github.com/pkg/errors
 2025-05-26 11:30:15 -07:00
Davanum Srinivas
7c0f968ab2 Drop usages of deprecated otelgrpc methods 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-05-26 08:32:09 -04:00
Stephen Kitt
54b2fad033 kubectl: drop dependency on github.com/pkg/errors 
The package is unmaintained, and kubectl doesn't rely on the
functionality it provides on top of Golang errors (stack traces).

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2025-05-26 11:28:24 +02:00
Davanum Srinivas
1ffda045cb update to latest ishidawataru/sctp dependency 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-05-23 07:44:49 -07:00
Davanum Srinivas
c509e22d11 Add a list of modules that should be pinned at current versions 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-05-20 18:05:57 -04:00
Davanum Srinivas
5def7fadf3 Drop dependency on x/exp package in mount_linux_test.go 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-05-16 20:46:55 +00:00
Jordan Liggitt
cf0bbf1171 bump etcd client to 3.6 
hack/pin-dependency.sh go.etcd.io/etcd/api/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/client/pkg/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/client/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/pkg/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/server/v3 v3.6.0

hack/pin-dependency.sh github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0

hack/update-vendor.sh
 2025-05-15 21:19:11 -04:00
Josh Gwosdz
7a24c4ce5d chore: update github.com/google/cel-go dependency to v0.25.0 
Signed-off-by: Josh Gwosdz <jgwosdz@redhat.com>
 2025-04-25 10:07:12 +02:00
Benjamin Elder
08794974b7 track gopkg.in/yaml.v3 as an unwanted depdendency 
this repo (which also has yaml.v2) was archived

we have a fork of it already in sigs.k8s.io/yaml/goyaml.v3
 2025-04-24 15:02:29 -07:00
Tim Hockin
f08e640b9e Lock down gofuzz in deps 2025-03-08 15:22:01 -08:00
Davanum Srinivas
97a54dc4b0 update to v1.22.0-rc.0 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-03-07 13:45:34 -05:00
Davanum Srinivas
5ecddb6571 update to latest cadvisor @ v0.52.0 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-03-05 06:36:39 -05:00
David Ashpole
29c219dceb update go.opentelemetry.io dependencies to v1.33.0/v0.58.0 2025-03-01 19:18:34 +00:00
Davanum Srinivas
faf30b3067 update github.com/coreos/go-oidc to v2.3.0 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-01-22 15:27:54 -05:00
Davanum Srinivas
43d86c2a3e Drop github.com/asaskevich/govalidator 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-01-14 15:53:49 -05:00
Davanum Srinivas
0d8a8fe306 Update to latest kustomize/v5.6.0 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-01-14 13:12:48 -05:00
Sascha Grunert
c3a3a54822 Add github.com/golang/protobuf to unwanted dependencies 
Follow-up on https://github.com/kubernetes/kubernetes/pull/128659 to
avoid reintroducing the dependency again.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2024-12-16 09:57:18 +01:00
Jordan Liggitt
3baa6f08c0 Add modern-go libraries to unwanted dependencies 2024-11-21 11:25:44 -05:00
Prince Pereira
07c79da04f vendoring changes for new hnslib v0.0.8. 2024-11-18 23:30:50 +05:30
Kubernetes Prow Robot
09e5e6269a Merge pull request #128626 from dims/add-go-spew-to-unwanted-dependencies-we-track 
Add go-spew to unwanted dependencies we track
 2024-11-07 08:51:38 +00:00
Harshal Neelkamal
6fdacf0411 Add plugin and key-cache for ExternalJWTSigner integration 2024-11-07 03:16:23 +00:00
Davanum Srinivas
199b7bdd1f Add go-spew to unwanted dependencies we track 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-11-06 17:41:56 -05:00
Kubernetes Prow Robot
9a2a7537f0 Merge pull request #128580 from jpbetz/bump-kube-openapi 
Bump kube-openapi to latest
 2024-11-05 21:45:41 +00:00