kubecost / kubectl-cost

CLI for determining the cost of Kubernetes workloads
Apache License 2.0
913 stars 60 forks source link

Partially update dependencies for gogo/protobuf vuln fix in v1.3.2 #102

Closed michaelmdresser closed 2 years ago

michaelmdresser commented 2 years ago

What does this PR change?

Updates K8s and cost-model dependencies to reduce the impact of https://github.com/kubecost/kubectl-cost/security/dependabot/1. This dependency vuln cannot yet be fully eliminated because other dependencies which require it have not yet been updated.

This PR also modifies the PR CI action to fix a new error that has cropped up.

Does this PR rely on any other PRs?

N/A

How does this PR impact users? (This is the kind of thing that goes in release notes!)

N/A

Links to Issues or ZD tickets this PR addresses or fixes

N/A

How was this PR tested?

Using the test script locally after building.

Have you made an update to documentation?

N/A