Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade the pacakges to fix the Synk security findings #1

Merged

Conversation

paulzhang97
Copy link

@paulzhang97 paulzhang97 commented Apr 24, 2024

Issue

Resolve the security Synk findings. Need to upgrade helm and golang.org/x/net,

Description

  • upgrade helm to v3.14.2. It requires v0.29.0 of client-go.
  • upgrade k8s.io pkgs such as k8s.io/apimachinery, k8s.io/client-go to v0.29.0
  • upgrade controller-runtime to v0.17.0. v0.17.0 requires upgrading Golang from 1.19 to 1.21.
  • upgrade Golang to 1.21.
  • change the AWS LB controller code because of API changes to k8s.io/client-go and controller-runtime.
  • upgrade golang.org/x/net to v0.23.0.

Checklist

  • Added tests that cover your change (if possible)
  • Added/modified documentation as required (such as the README.md, or the docs directory)
  • Manually tested with Install pack. Enabling PL passes.
  • Made sure the title of the PR is a good description that can go into the release notes

BONUS POINTS checklist: complete for good vibes and maybe prizes?! 🤯

  • Backfilled missing tests for code in same general area 🎉
  • Refactored something and made the world a better place 🌟

@paulzhang97 paulzhang97 force-pushed the paulz/fix-synk-findings branch from 4cfb756 to 2885efc Compare April 29, 2024 02:57
@paulzhang97 paulzhang97 force-pushed the paulz/fix-synk-findings branch from 2885efc to aeeba3b Compare April 29, 2024 03:01
@paulzhang97 paulzhang97 force-pushed the paulz/fix-synk-findings branch from 839a5d1 to e29ae06 Compare April 29, 2024 19:19
@paulzhang97 paulzhang97 merged commit afa55a3 into paulz/no-delete-pl-listeners-v2-4-7 Apr 29, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant