openshift-ci-robot
commented
1 month ago @ardaguclu: This pull request references WRKLDS-1292 which is a valid jira issue.
Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.17.0" version, but no target version was set.
In response to [this](https://github.com/openshift/oc/pull/1789):
>There is an good attempt to cover CVE fixes https://github.com/openshift/oc/pull/1788. However, first we need to land k8s 1.30 changes into the oc. Therefore, this PR tries to combine both of them.
>
>This PR bumps;
>* k8s dependencies to 1.30.1
>* go version to 1.22.0 (and toolchain 1.22.1)
>* containers/image/v5 to v5.30.1
>* aws-sdk-go to v1.53.12
>
>Additionally since runc indirect import comes from library-go and library-go still uses 1.1.10, in order to cover CVEs, this PR manually modifies this indirect import by bumping it to v1.1.12.
Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Foc). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
ardaguclu
psalajova
ingvagabund
openshift-ci[bot]
There is a good attempt https://github.com/openshift/oc/pull/1788 to cover CVE fixes. However, first we need to land k8s 1.30 changes into the oc. Therefore, this PR tries to combine both of them.
This PR bumps;
Additionally since runc indirect import comes from library-go and library-go still uses 1.1.10, in order to cover CVEs, this PR manually modifies this indirect import by bumping it to v1.1.12.