Skip to content
This repository has been archived by the owner on Jan 5, 2023. It is now read-only.

uplift client-go to 0.20.0 #96

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

tuminoid
Copy link
Member

k8s.io/client-go has vulnerability GO-2021-0064, which is fixed in 0.20.0. While the newest client-go is 0.26.0, do only minimal uplift.

k8s.io/client-go has vulnerability GO-2021-0064, which is fixed in
0.20.0. While the newest client-go is 0.26.0, do only minimal uplift.
@metal3-io-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign ravipwaghmare after the PR has been reviewed.
You can assign the PR to them by writing /assign @ravipwaghmare in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tuminoid
Copy link
Member Author

/hold

@metal3-io-bot metal3-io-bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. labels Dec 19, 2022
@tuminoid
Copy link
Member Author

/hold cancel

@tuminoid
Copy link
Member Author

/unhold

@metal3-io-bot metal3-io-bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Dec 19, 2022
@kashifest
Copy link
Member

We should probably uplift go itself here, go1.16 is very old and probably have far more vulnerabilities.

@tuminoid
Copy link
Member Author

We should probably uplift go itself here, go1.16 is very old and probably have far more vulnerabilities.

True, but it is separate issue from this. This repository is also very inactive, so it should be agreed first if we should keep maintaining it in the first place.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants