Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump coredns and cluster-autoscaler #7350

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

manuelbuil
Copy link
Contributor

Proposed Changes

Version bump for coredns and cluster-autoscaler

Types of Changes

Version bump

Verification

Verify cluster-autoscaler and coredns work

Testing

Linked Issues

#7349

User-Facing Change

Bump coredns to v1.12.0 and cluster-autoscaler to v1.9.0

Further Comments

@manuelbuil manuelbuil requested a review from a team as a code owner November 27, 2024 09:01
@codecov-commenter
Copy link

codecov-commenter commented Nov 27, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 23.70%. Comparing base (ee6b211) to head (26c4cd1).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #7350   +/-   ##
=======================================
  Coverage   23.70%   23.70%           
=======================================
  Files          33       33           
  Lines        3392     3392           
=======================================
  Hits          804      804           
  Misses       2541     2541           
  Partials       47       47           
Flag Coverage Δ
inttests 8.99% <ø> (ø)
unittests 16.84% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@cwayne18
Copy link
Member

/trivy

Copy link
Contributor


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://aquasecurity.github.io/trivy/v0.57/docs/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


bin/containerd (gobinary)
=========================
Total: 0 (HIGH: 0, CRITICAL: 0)


Suppressed Vulnerabilities (Total: 1)
=====================================
┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬──────────────┬─────────────────────────────────────┬──────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │    Status    │              Statement              │        Source        │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼──────────────┼─────────────────────────────────────┼──────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/google.golang.o- │ CVE-2023-47108 │ HIGH     │ not_affected │ vulnerable_code_not_in_execute_path │ rancher.openvex.json │
│ rg/grpc/otelgrpc                                             │                │          │              │                                     │                      │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴──────────────┴─────────────────────────────────────┴──────────────────────┘

bin/kubelet (gobinary)
======================
Total: 0 (HIGH: 0, CRITICAL: 0)


Suppressed Vulnerabilities (Total: 1)
=====================================
┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬──────────────┬─────────────────────────────────────┬──────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │    Status    │              Statement              │        Source        │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼──────────────┼─────────────────────────────────────┼──────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/github.com/emic- │ CVE-2023-45142 │ HIGH     │ not_affected │ vulnerable_code_not_in_execute_path │ rancher.openvex.json │
│ klei/go-restful/otelrestful                                  │                │          │              │                                     │                      │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴──────────────┴─────────────────────────────────────┴──────────────────────┘

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants