Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-1.30] Update to v1.30.8-k3s1 and Go 1.22.9 #11461

Merged
merged 1 commit into from
Dec 12, 2024

Conversation

brooksn
Copy link
Member

@brooksn brooksn commented Dec 11, 2024

No description provided.

Signed-off-by: Brooks Newberry <[email protected]>
@brooksn brooksn requested a review from a team as a code owner December 11, 2024 17:58
@cwayne18
Copy link
Member

/trivy

Copy link
Contributor


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://aquasecurity.github.io/trivy/v0.57/docs/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


bin/k3s (gobinary)
==================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/google.golang.o- │ CVE-2023-47108 │ HIGH     │ fixed  │ v0.45.0           │ 0.46.0        │ opentelemetry-go-contrib: DoS vulnerability in otelgrpc due │
│ rg/grpc/otelgrpc                                             │                │          │        │                   │               │ to unbound cardinality metrics                              │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-47108                  │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

@brandond brandond changed the title Update to v1.30.8-k3s1 and Go 1.22.9 [release-1.30] Update to v1.30.8-k3s1 and Go 1.22.9 Dec 11, 2024
Copy link

codecov bot commented Dec 11, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 42.76%. Comparing base (fe0a1ba) to head (6e673aa).
Report is 2 commits behind head on release-1.30.

Additional details and impacted files
@@               Coverage Diff                @@
##           release-1.30   #11461      +/-   ##
================================================
- Coverage         46.92%   42.76%   -4.16%     
================================================
  Files               181      181              
  Lines             18913    18913              
================================================
- Hits               8874     8089     -785     
- Misses             8709     9632     +923     
+ Partials           1330     1192     -138     
Flag Coverage Δ
e2etests 35.36% <ø> (-7.06%) ⬇️
inttests 18.76% <ø> (-16.07%) ⬇️
unittests 14.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@brooksn brooksn merged commit b43a365 into k3s-io:release-1.30 Dec 12, 2024
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants