-
Notifications
You must be signed in to change notification settings - Fork 668
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump dependencies to address CVE-2023-44487 #1264
Bump dependencies to address CVE-2023-44487 #1264
Conversation
[APPROVALNOTIFIER] This PR is APPROVED Approval requirements bypassed by manually added approval. This pull-request has been approved by: The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
/retest-required |
1 similar comment
/retest-required |
Hey @ingvagabund , change all occurrences of test/e2e/e2e_duplicatepods_test.go
89: Image: "registry.k8s.io/pause",
test/e2e/e2e_leaderelection_test.go
179: Image: "registry.k8s.io/pause",
test/e2e/e2e_toomanyrestarts_test.go
90: Image: "registry.k8s.io/pause",
test/e2e/e2e_test.go
73: Image: "registry.k8s.io/pause",
334: Image: "registry.k8s.io/pause",
1339: Image: "registry.k8s.io/pause",
test/run-e2e-tests.sh
36: ${CONTAINER_ENGINE:-docker} pull registry.k8s.io/pause
37: kind load docker-image registry.k8s.io/pause Locally I was getting same errors, and with this change:
|
/retest-required |
/lgtm |
Does this need to be cherry-picked to 0.26/release-1.26? |
/easycla |
Eventually. We are still evaluating. This might be only a partial fix. |
@a7i we should. However, we can fix this only partially. There's no golang 1.19 backport yet: golang/go#63417 (comment) |
There's no 1.27.7 release yet. So pinning the k8s deps to the latest release-1.27 head