Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Dependabot reported alerts in go modules #4327

Closed
manusa opened this issue Aug 10, 2022 · 1 comment · Fixed by #4377
Closed

Fix Dependabot reported alerts in go modules #4327

manusa opened this issue Aug 10, 2022 · 1 comment · Fixed by #4377
Assignees
Labels
Milestone

Comments

@manusa
Copy link
Member

manusa commented Aug 10, 2022

Describe the bug

Dependabot has reported a few alerts on our internal go module tooling

https://github.com/fabric8io/kubernetes-client/security/dependabot

Fabric8 Kubernetes Client version

SNAPSHOT

Steps to reproduce

n/a

Expected behavior

No issues should be reported

Runtime

other (please specify in additional context)

Kubernetes API Server version

other (please specify in additional context)

Environment

other (please specify in additional context)

Fabric8 Kubernetes Client Logs

No response

Additional context

No response

@manusa manusa added the bug label Aug 10, 2022
@manusa manusa added this to the 6.1.0 milestone Aug 10, 2022
@rohanKanojia rohanKanojia self-assigned this Aug 24, 2022
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 24, 2022
Related to fabric8io#4327

+ Update Knative Model to v0.34.0
+ Force indirect dependency github.com/gogo/protobuf v1.3.2 in go.mod
+ Force indirect dependency gopkg.in/yaml.v2 to v2.4.0
+ Force indirect dependency github.com/containerd/containerd to v1.6.0
+ Force indirect dependency github.com/docker/distribution to v2.8.0+incompatible
+ Force indirect dependency github.com/opencontainers/image-spec to v1.0.3-0.20220114050600-8b9d41f48198

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 25, 2022
Related to fabric8io#4327

+ Update Knative Model to v0.34.0
+ Force indirect dependency github.com/gogo/protobuf v1.3.2 in go.mod
+ Force indirect dependency gopkg.in/yaml.v2 to v2.4.0
+ Force indirect dependency github.com/containerd/containerd to v1.6.0
+ Force indirect dependency github.com/docker/distribution to v2.8.0+incompatible
+ Force indirect dependency github.com/opencontainers/image-spec to v1.0.3-0.20220114050600-8b9d41f48198

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 25, 2022
Related to fabric8io#4327

+ Update Knative Model to v0.34.0
+ Force indirect dependency github.com/gogo/protobuf v1.3.2 in go.mod
+ Force indirect dependency gopkg.in/yaml.v2 to v2.4.0
+ Force indirect dependency github.com/containerd/containerd to v1.6.0
+ Force indirect dependency github.com/docker/distribution to v2.8.0+incompatible
+ Force indirect dependency github.com/opencontainers/image-spec to v1.0.3-0.20220114050600-8b9d41f48198

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 25, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 26, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 26, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 26, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit that referenced this issue Aug 26, 2022
Related to #4327

+ Update Knative Model to v0.34.0
+ Force indirect dependency github.com/gogo/protobuf v1.3.2 in go.mod
+ Force indirect dependency gopkg.in/yaml.v2 to v2.4.0
+ Force indirect dependency github.com/containerd/containerd to v1.6.0
+ Force indirect dependency github.com/docker/distribution to v2.8.0+incompatible
+ Force indirect dependency github.com/opencontainers/image-spec to v1.0.3-0.20220114050600-8b9d41f48198

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 26, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 26, 2022
…4327)

+ Bump Camel-K model to v1.9.2
+ Force gogo/protobuf and gopkg.in/yaml.v2 dependencies to not use
  vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 26, 2022
…4327)

+ Bump Camel-K model to v1.9.2
+ Force gogo/protobuf and gopkg.in/yaml.v2 dependencies to not use
  vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit that referenced this issue Aug 29, 2022
+ Bump Camel-K model to v1.9.2
+ Force gogo/protobuf and gopkg.in/yaml.v2 dependencies to not use
  vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 29, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to hypnoce/kubernetes-client that referenced this issue Aug 29, 2022
…to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 29, 2022
…fabric8io#4327)

+ Update CertManager extension to latest version
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 29, 2022
…fabric8io#4327)

+ Update CertManager extension to latest version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Remove Deprecated CertManager APIs
  - CertManager v1alpha2, v1alpha3, v1beta1 APIs were deprecated in v1.4.0 and are removed in v1.7.0
    Read https://cert-manager.io/docs/installation/upgrading/remove-deprecated-apis/ for more details
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 29, 2022
… version (fabric8io#4327)

+ Update CertManager extension to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Remove Deprecated CertManager APIs
  - CertManager v1alpha2, v1alpha3, v1beta1 APIs were deprecated in v1.4.0 and are removed in v1.7.0
    Read https://cert-manager.io/docs/installation/upgrading/remove-deprecated-apis/ for more details
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 29, 2022
… version (fabric8io#4327)

+ Update CertManager extension to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Remove Deprecated CertManager APIs
  - CertManager v1alpha2, v1alpha3, v1beta1 APIs were deprecated in v1.4.0 and are removed in v1.7.0
    Read https://cert-manager.io/docs/installation/upgrading/remove-deprecated-apis/ for more details
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 29, 2022
… version (fabric8io#4327)

+ Update CertManager extension to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Remove Deprecated CertManager APIs
  - CertManager v1alpha2, v1alpha3, v1beta1 APIs were deprecated in v1.4.0 and are removed in v1.7.0
    Read https://cert-manager.io/docs/installation/upgrading/remove-deprecated-apis/ for more details
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit that referenced this issue Aug 30, 2022
…to not use vulnerable versions (#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Remove Deprecated CertManager APIs
  - CertManager v1alpha2, v1alpha3, v1beta1 APIs were deprecated in v1.4.0 and are removed in v1.7.0
    Read https://cert-manager.io/docs/installation/upgrading/remove-deprecated-apis/ for more details
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 30, 2022
+ Update Kubernetes Model to v1.25.0
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 31, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 31, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit to rohanKanojia/kubernetes-client that referenced this issue Aug 31, 2022
… version (fabric8io#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit that referenced this issue Aug 31, 2022
… version (#4327)

+ Update CertManager extension generator-v1 module to latest version (`v1.9.0-beta.1.0.20220829113803-8465f1223efb`)
+ Update CertManager extension generator-v1alpha2, generator-v1alpha3,
  generator-v1beta1 to v1.6.0 version
+ Remove manual model classes with field name `class` (i.e. ACMEChallengeSolverHTTP01Ingress)
+ Force protobuf and yaml.v2 dependencies to not use vulnerable versions

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
@manusa manusa modified the milestones: 6.1.0, 6.2.0 Aug 31, 2022
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 1, 2022
+ Update Kubernetes Model to v1.25.0
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 1, 2022
+ Update Kubernetes Model to v1.25.0
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 1, 2022
+ Update Kubernetes Model to v1.25.0
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 1, 2022
+ Update Kubernetes Model to v1.25.0
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 7, 2022
+ Update Kubernetes Model to v1.25.0
+ Add autoscaling/v2 HorizontalPodAutoscaler model and DSL
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
rohanKanojia added a commit to rohanKanojia/kubernetes-client that referenced this issue Sep 9, 2022
+ Update Kubernetes Model to v1.25.0
+ Add autoscaling/v2 HorizontalPodAutoscaler model and DSL
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (fabric8io#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
manusa pushed a commit that referenced this issue Sep 21, 2022
+ Update Kubernetes Model to v1.25.0
+ Add autoscaling/v2 HorizontalPodAutoscaler model and DSL
+ Force `containerd/containerd`, `docker/distribution` and
  `opencontainers/image-spec` to not use vulnerable versions (#4327)

Signed-off-by: Rohan Kumar <rohaan@redhat.com>
@manusa manusa reopened this Sep 21, 2022
@manusa
Copy link
Member Author

manusa commented Sep 21, 2022

Dependabot alerts are clear now ✔️

@manusa manusa closed this as completed Sep 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
2 participants