Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-1.13] bump otel dependency: fixing CVE alert #6437

Closed
wants to merge 41 commits into from

Conversation

inteon
Copy link
Member

@inteon inteon commented Oct 20, 2023

Bump the otel dependency to fix a CVE alert.

Kind

/kind cleanup

Release Note

NONE

inteon and others added 30 commits September 12, 2023 08:45
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…33-to-release-1.13

[release-1.13] Fix trivy CVE alert for cyphar/filepath-securejoin
Co-authored-by: Paul Merrison <paul@tetrate.io>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…32-to-release-1.13

[release-1.13] Upgrade dependencies
…1.13' commit

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Update cert-manager version imported by cmctl to the latest 'release-1.13' commit
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…54-to-release-1.13

[release-1.13] BUGFIX: CertificateRequest short names must be unique.
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…ful_3

[release-1.13] Fix go-restful dependency "do not use" version
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…69-to-release-1.13

[release-1.13] Upgrade Go from 1.20.7 to 1.20.8
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
[release-1.13] import latest release 1.13 commit in cmctl
Signed-off-by: Arin <136636751+asapekia@users.noreply.github.com>
…80-to-release-1.13

[release-1.13] BUGFIX[helm]: Fix issue where webhook feature gates were only set if controller feature gates are set (closes cert-manager#6346)
prompted by cert-manager#4033

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
…pbase

[release-1.13] bump base images to latest
Signed-off-by: Maël Valais <mael@vls.dev>
…98-to-release-1.13

[release-1.13] Venafi issuer: ResetCertificate wasn't working
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
[release-1.13] Bump go to address CVE-2023-39325 and update base images
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
inteon and others added 11 commits October 18, 2023 08:43
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
… instead of slices)

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
…06-to-release-1.13

[release-1.13] Fix DuplicateSecretName issue
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
includes running `make update-licenses`

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
this was done on master and seems a harmless bump

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
…ensemacos

[release-1.13] Licence checker updates
…pnet

[release-1.13] Bump golang.org/x/net
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
@jetstack-bot jetstack-bot added kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. release-note-none Denotes a PR that doesn't merit a release note. area/acme Indicates a PR directly modifies the ACME Issuer code labels Oct 20, 2023
@jetstack-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from inteon. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jetstack-bot jetstack-bot added dco-signoff: no Indicates that at least one commit in this pull request is missing the DCO sign-off message. area/deploy Indicates a PR modifies deployment configuration labels Oct 20, 2023
@jetstack-bot
Copy link
Contributor

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.

📝 Please follow instructions in the contributing guide to update your commits with the DCO

Full details of the Developer Certificate of Origin can be found at developercertificate.org.

The list of commits missing DCO signoff:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@jetstack-bot jetstack-bot added the area/testing Issues relating to testing label Oct 20, 2023
@inteon inteon closed this Oct 20, 2023
@jetstack-bot jetstack-bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Oct 20, 2023
@jetstack-bot
Copy link
Contributor

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@jetstack-bot jetstack-bot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Oct 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/acme Indicates a PR directly modifies the ACME Issuer code area/deploy Indicates a PR modifies deployment configuration area/testing Issues relating to testing dco-signoff: no Indicates that at least one commit in this pull request is missing the DCO sign-off message. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants