NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3#317
Conversation
…oint Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
The ClientSecret field in OAuthConfig was typed as plain string, causing it to be exposed in plaintext via the /-/config HTTP endpoint. Change it to config_util.Secret so Prometheus redacts it as <secret>. Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
This fixes the stored XSS as described in: GHSA-fw8g-cg8f-9j28 Signed-off-by: Julius Volz <julius.volz@gmail.com> Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
…appylength remote: validate snappy decoded length before allocation in read endpoint
…act-escape ui: fix stored XSS in old UI heatmap chart tick labels
…adsecret remote/azuread: use Secret type for OAuth client_secret
Signed-off-by: Julien Pivotto <291750+roidelapluie@users.noreply.github.com>
…t-rel-3.11.3 Release 3.11.3
v3.11.3 # -----BEGIN SSH SIGNATURE----- # U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg7hZ9qUTtuIC3orQMCoP9dIliYw # hkXEErIk8NfCGjCBAAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5 # AAAAQBd7WKj+uO3t/DCRKZyKY29W8i7YIf0RAtZEUnbZIiVPK/bcDuI5MkkV+mGDqS3d47 # Sl3hOPraLpxNfXZLu8owo= # -----END SSH SIGNATURE----- # gpg verification failed.
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
simonpasquier
left a comment
simonpasquier
left a comment
There was a problem hiding this comment.
/approve
/lgtm
/retitle NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3
openshift-ci
Bot
changed the title
|
@openshift-monitoring-bot[bot]: This pull request explicitly references no jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci-robot
added
the
jira/valid-reference
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: openshift-monitoring-bot[bot], simonpasquier The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
approved
|
/verified by tests |
openshift-ci-robot
added
the
verified
|
@simonpasquier: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/retest-required |
|
@openshift-monitoring-bot[bot]: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
4 participants
Description
This is an automated version bump from CI.
The logs for this run can be found in the syncbot repo actions.