Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency update - Golang 1.17.5 /1.16.12 #2349

Closed
26 of 27 tasks
cpanato opened this issue Dec 9, 2021 · 4 comments
Closed
26 of 27 tasks

Dependency update - Golang 1.17.5 /1.16.12 #2349

cpanato opened this issue Dec 9, 2021 · 4 comments
Assignees
@cpanato
Labels
area/dependency Issues or PRs related to dependency changes area/release-eng Issues or PRs related to the Release Engineering subproject kind/feature Categorizes issue or PR as related to a new feature. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. sig/release Categorizes an issue or PR as relevant to SIG Release.
Milestone
v1.24

Comments

@cpanato
Copy link
Member

cpanato commented Dec 9, 2021 •
edited

Tracking info

Link to any previous tracking issue: #2341

Golang mailing list announcement: https://groups.google.com/g/golang-announce/c/hcmEScgc00k/m/ZWnOjeY4CQAJ

SIG Release Slack thread: https://kubernetes.slack.com/archives/CJH2GBF7Y/p1639062835057200

Work items for go1.17.5

After kube-cross image promotion

After kubernetes/kubernetes has been updated

Cherry picks

For k8s releases 1.21 and 1.22 which uses go1.16

Cherry picks

After kubernetes/kubernetes has been updated

Follow-up items

/assign
cc: @kubernetes/release-engineering
@cpanato cpanato added kind/feature Categorizes issue or PR as related to a new feature. sig/release Categorizes an issue or PR as relevant to SIG Release. area/release-eng Issues or PRs related to the Release Engineering subproject area/dependency Issues or PRs related to dependency changes labels Dec 9, 2021
@liggitt
Copy link
Member

liggitt commented Dec 10, 2021 •
edited

I think we also need to update our version of golang.org/x/net (https://github.com/golang/net) since that's the source and fix of the CVE (golang vendors golang.org/x/net)

This was referenced Dec 10, 2021
Closed
Merged
Merged
Merged
@cpanato cpanato added this to the v1.24 milestone Dec 10, 2021
@cpanato
Copy link
Member Author

cpanato commented Dec 10, 2021

/priority important-soon

@k8s-ci-robot k8s-ci-robot added priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. and removed needs-priority labels Dec 10, 2021
This was referenced Dec 10, 2021
Merged
Closed
Merged
Merged
Closed
Merged
Merged
Merged
Merged
@justaugustus justaugustus mentioned this issue Dec 13, 2021
Closed
24 tasks
@cpanato cpanato mentioned this issue Dec 14, 2021
Merged
@cpanato
Copy link
Member Author

cpanato commented Dec 14, 2021

all work is done
/close

@k8s-ci-robot
Copy link
Contributor

@cpanato: Closing this issue.

In response to this:

all work is done
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

guessi added a commit to guessi/kubectl-grep that referenced this issue Jan 5, 2022
@guessi
Base: Upgrade to kubernetes-1.21.8 and keep golang.org/x/net version …
6d138a1 
…aligned to upstream

ref:
- https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#changelog-since-v1217
- kubernetes/release#2349
guessi added a commit to guessi/kubectl-grep that referenced this issue Jan 5, 2022
@guessi
Base: Pin golang.org/x/net version aligned to upstream
0c403ad 
ref:
- https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#changelog-since-v1217
- kubernetes/release#2349
@justaugustus justaugustus mentioned this issue Jan 7, 2022
Closed
27 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cpanato cpanato

Labels
area/dependency Issues or PRs related to dependency changes area/release-eng Issues or PRs related to the Release Engineering subproject kind/feature Categorizes issue or PR as related to a new feature. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. sig/release Categorizes an issue or PR as relevant to SIG Release.
Projects
None yet
Milestone
v1.24
Development

No branches or pull requests
3 participants
@liggitt @cpanato @k8s-ci-robot