Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: bump thanos to 0.37.1 to fix cve #2910

Merged
merged 7 commits into from
Dec 17, 2024
Merged

feat: bump thanos to 0.37.1 to fix cve #2910

merged 7 commits into from
Dec 17, 2024

Conversation

shubham2g
Copy link
Contributor

What problem does this PR solve?:
Fix CVE for Thanos

Which issue(s) does this PR fix?:
https://jira.nutanix.com/browse/NCN-104607

@shubham2g shubham2g self-assigned this Dec 5, 2024
@github-actions github-actions bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Dec 5, 2024
@coveralls
Copy link

coveralls commented Dec 5, 2024 •
edited
Loading

Pull Request Test Coverage Report for Build 12372981663

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 51.703%
Totals Coverage Status
Change from base Build 12372896670: 0.0%
Covered Lines: 167
Relevant Lines: 323
💛 - Coveralls

@github-actions github-actions bot added services/centralized-kubecost services/kubecost size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Dec 5, 2024
@mesosphere-ci mesosphere-ci added ok-to-test Signals mergebot that CI checks are ready to be kicked off do-not-merge/testing Do not merge because there is still on-going testing open-kommander-pr Automatically triggers the creation of a PR in Kommander repo update-licenses signals mergebot to update licenses.d2iq.yaml labels Dec 5, 2024
@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Dec 5, 2024

✅ Created Kommander branch to test kommander-applications changes: https://github.com/mesosphere/kommander/tree/kapps/main/Shubham/fix-cve-thanos

@shubham2g shubham2g removed the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 5, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from 2ffb78f to 23600e7 Compare December 5, 2024 12:02
@mesosphere-ci mesosphere-ci added the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 5, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from f8a5390 to 046f33d Compare December 5, 2024 12:42
@shubham2g shubham2g removed the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 5, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from 38f2016 to 9f6b14f Compare December 5, 2024 14:00
@mesosphere-ci mesosphere-ci added the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 5, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch 2 times, most recently from b28fcec to 2b8401f Compare December 5, 2024 15:14
@shubham2g shubham2g removed the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 5, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from eeb9e37 to bc8863f Compare December 6, 2024 06:15
@mesosphere-ci mesosphere-ci added the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 6, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch 2 times, most recently from 2d85007 to 422c30d Compare December 6, 2024 11:31
@shubham2g shubham2g removed the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 6, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from d3a8b68 to df48ce8 Compare December 6, 2024 12:37
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from ca2138c to 046f33d Compare December 9, 2024 11:22
@mesosphere-ci mesosphere-ci added the update-licenses signals mergebot to update licenses.d2iq.yaml label Dec 9, 2024
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from 438e09d to 7380e7e Compare December 9, 2024 12:08
@shubham2g shubham2g added open-kommander-pr Automatically triggers the creation of a PR in Kommander repo and removed open-kommander-pr Automatically triggers the creation of a PR in Kommander repo labels Dec 9, 2024
@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Dec 9, 2024

✅ Created Kommander branch to test kommander-applications changes: https://github.com/mesosphere/kommander/tree/kapps/main/Shubham/fix-cve-thanos

@shubham2g shubham2g requested a review from mhrabovcin December 11, 2024 15:28
@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from e5fd6d7 to 8aa0ea7 Compare December 12, 2024 12:45
@shubham2g shubham2g added open-kommander-pr Automatically triggers the creation of a PR in Kommander repo and removed open-kommander-pr Automatically triggers the creation of a PR in Kommander repo labels Dec 12, 2024
@github-actions GitHub Actions
Copy link
Contributor

✅ Created Kommander branch to test kommander-applications changes: https://github.com/mesosphere/kommander/tree/kapps/main/Shubham/fix-cve-thanos

@github-actions github-actions bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Dec 16, 2024
@shubham2g shubham2g added open-kommander-pr Automatically triggers the creation of a PR in Kommander repo and removed open-kommander-pr Automatically triggers the creation of a PR in Kommander repo labels Dec 16, 2024
@github-actions GitHub Actions
Copy link
Contributor

✅ Created Kommander branch to test kommander-applications changes: https://github.com/mesosphere/kommander/tree/kapps/main/Shubham/fix-cve-thanos

@shubham2g shubham2g requested a review from mhrabovcin December 17, 2024 11:37
@shubham2g
Copy link
Contributor Author

@mhrabovcin Kindly review and suggest.

@shubham2g shubham2g force-pushed the Shubham/fix-cve-thanos branch from 33176c8 to 71c1698 Compare December 17, 2024 12:26
@mhrabovcin mhrabovcin merged commit fe2760a into main Dec 17, 2024
54 checks passed
@mhrabovcin mhrabovcin deleted the Shubham/fix-cve-thanos branch December 17, 2024 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mhrabovcin mhrabovcin mhrabovcin approved these changes

Assignees

@shubham2g shubham2g

Labels
do-not-merge/testing Do not merge because there is still on-going testing ok-to-test Signals mergebot that CI checks are ready to be kicked off open-kommander-pr Automatically triggers the creation of a PR in Kommander repo services/centralized-kubecost services/kube-prometheus-stack services/kubecost services/thanos size/M Denotes a PR that changes 30-99 lines, ignoring generated files. update-licenses signals mergebot to update licenses.d2iq.yaml
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@shubham2g @coveralls @mhrabovcin @mesosphere-ci