Backport of security: bump k8s.io/apimachinery version into release/1…

….16.x (#21032) * security: bump k8s.io/apimachinery version * add changelog * go mod tidy
hashicorp · May 2, 2024 · 21df740 · 21df740
1 parent eee7638
commit 21df740
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 100 deletions.
diff --git a/.changelog/21032.txt b/.changelog/21032.txt
@@ -0,0 +1,4 @@
+```release-note:security
+Upgrade to support k8s.io/apimachinery `v0.18.7 or higher`. This resolves CVE
+[CVE-2020-8559](https://nvd.nist.gov/vuln/detail/CVE-2020-8559).
+```
diff --git a/go.mod b/go.mod
@@ -47,7 +47,7 @@ require (
 	github.com/hashicorp/go-checkpoint v0.5.0
 	github.com/hashicorp/go-cleanhttp v0.5.2
 	github.com/hashicorp/go-connlimit v0.3.0
-	github.com/hashicorp/go-discover v0.0.0-20220714221025-1c234a67149a
+	github.com/hashicorp/go-discover v0.0.0-20230724184603-e89ebd1b2f65
 	github.com/hashicorp/go-hclog v1.5.0
 	github.com/hashicorp/go-immutable-radix v1.3.1
 	github.com/hashicorp/go-memdb v1.3.4