Update module k8s.io/kubernetes to v1.30.3 [SECURITY] - autoclosed

renovate-rancher[bot] commented 6 months ago

This PR contains the following updates:

Package	Type	Update	Change
k8s.io/kubernetes	require	patch	`v1.30.0` -> `v1.30.3`

GitHub Vulnerability Alerts

CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Release Notes

kubernetes/kubernetes (k8s.io/kubernetes)

### [`v1.30.3`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.30.3): Kubernetes v1.30.3 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.30.2...v1.30.3) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md) for more details. ### [`v1.30.2`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.30.2): Kubernetes v1.30.2 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.30.1...v1.30.2) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md) for more details. ### [`v1.30.1`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.30.1): Kubernetes v1.30.1 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.30.0...v1.30.1) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md) for more details.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

renovate-rancher[bot] commented 3 months ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`github.com/golang/protobuf`	`v1.5.3` -> `v1.5.4`
`golang.org/x/crypto`	`v0.16.0` -> `v0.21.0`
`golang.org/x/net`	`v0.19.0` -> `v0.23.0`
`golang.org/x/sys`	`v0.16.0` -> `v0.18.0`
`golang.org/x/term`	`v0.15.0` -> `v0.18.0`
`google.golang.org/protobuf`	`v1.32.0` -> `v1.33.0`

renovate-rancher[bot] commented 3 months ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`github.com/golang/protobuf`	`v1.5.3` -> `v1.5.4`
`golang.org/x/crypto`	`v0.16.0` -> `v0.21.0`
`golang.org/x/net`	`v0.19.0` -> `v0.23.0`
`golang.org/x/sys`	`v0.16.0` -> `v0.18.0`
`golang.org/x/term`	`v0.15.0` -> `v0.18.0`
`google.golang.org/protobuf`	`v1.32.0` -> `v1.33.0`

rancher / system-agent