search

uhthomas / automata

Monorepo for Starjunk and subsidiaries
32 stars 2 forks source link

fix(deps): update module k8s.io/kubernetes to v1.29.7 [security] - autoclosed #495

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 6 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
k8s.io/kubernetes v1.29.1 -> v1.29.7 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Release Notes

kubernetes/kubernetes (k8s.io/kubernetes) ### [`v1.29.7`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.7): Kubernetes v1.29.7 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.6...v1.29.7) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details. ### [`v1.29.6`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.6): Kubernetes v1.29.6 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.5...v1.29.6) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details. ### [`v1.29.5`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.5): Kubernetes v1.29.5 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.4...v1.29.5) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details. ### [`v1.29.4`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.4): Kubernetes v1.29.4 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.3...v1.29.4) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details. ### [`v1.29.3`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.3): Kubernetes v1.29.3 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.2...v1.29.3) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details. ### [`v1.29.2`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.29.2): Kubernetes v1.29.2 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.1...v1.29.2) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md) for more details.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.