search

rancher / system-upgrade-controller

In your Kubernetes, upgrading your nodes
Apache License 2.0
723 stars 86 forks source link

Security related bumps in Go and BCI #253

Closed macedogm closed 1 year ago

macedogm commented 1 year ago
  1. Update BCI from 15.4 to 15.5.
  2. Update (only patch bump) github.com/docker/distribution to v2.8.2 in main go.mod to fix CVEs.
  3. Update (only patch bump) k8s.io/kubernetes to v1.25.12, and its related dependencies, in main go.mod to fix CVEs.
  4. Only update Go version to 1.19 in pkg/apis/go.mod to reflect the same version in the main go.mod. This also helps reduce the false positive noise from security scanners.