-
Notifications
You must be signed in to change notification settings - Fork 114
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
update to knative.dev/serving v0.37.5
Signed-off-by: Christian Kadner <[email protected]>
- Loading branch information
Showing
2 changed files
with
202 additions
and
157 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -6,50 +6,52 @@ require ( | |
| github.com/dereklstinson/cifar v0.0.0-20200421171932-5722a3b6a0c7 | ||
| github.com/go-logr/logr v1.2.4 | ||
| github.com/golang/protobuf v1.5.3 | ||
| github.com/google/go-cmp v0.6.0 | ||
| github.com/google/go-cmp v0.5.9 | ||
| github.com/kserve/kserve v0.11.2 | ||
| github.com/manifestival/controller-runtime-client v0.4.0 | ||
| github.com/manifestival/manifestival v0.7.1 | ||
| github.com/moverest/mnist v0.0.0-20160628192128-ec5d9d203b59 | ||
| github.com/onsi/ginkgo/v2 v2.11.0 | ||
| github.com/onsi/gomega v1.27.10 | ||
| github.com/onsi/ginkgo/v2 v2.9.7 | ||
| github.com/onsi/gomega v1.27.7 | ||
| github.com/operator-framework/operator-lib v0.10.0 | ||
| github.com/pkg/errors v0.9.1 | ||
| github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.55.0 | ||
| github.com/spf13/viper v1.11.0 | ||
| github.com/stretchr/testify v1.8.2 | ||
| github.com/stretchr/testify v1.8.1 | ||
| github.com/tommy351/goldga v0.5.0 | ||
| go.etcd.io/etcd/api/v3 v3.5.9 | ||
| go.etcd.io/etcd/client/v3 v3.5.9 | ||
| go.etcd.io/etcd/api/v3 v3.5.5 | ||
| go.etcd.io/etcd/client/v3 v3.5.5 | ||
| go.uber.org/atomic v1.11.0 | ||
| google.golang.org/grpc v1.58.3 | ||
| google.golang.org/grpc v1.56.3 | ||
| google.golang.org/protobuf v1.32.0 | ||
| k8s.io/api v0.27.6 | ||
| k8s.io/apimachinery v0.27.6 | ||
| k8s.io/client-go v0.27.6 | ||
| knative.dev/pkg v0.0.0-20231023151236-29775d7c9e5c | ||
| sigs.k8s.io/controller-runtime v0.14.7 | ||
| k8s.io/api v0.26.4 | ||
| k8s.io/apimachinery v0.26.4 | ||
| k8s.io/client-go v0.26.4 | ||
| knative.dev/pkg v0.0.0-20231023160942-0c39ce4b3a7f | ||
| sigs.k8s.io/controller-runtime v0.14.6 | ||
| sigs.k8s.io/yaml v1.3.0 | ||
| ) | ||
|
|
||
| // when adding/remove replace, remove the following block of indirect dependencies | ||
| // and run `go mod tidy -compat=1.20` (based on go version above) | ||
| require ( | ||
| cloud.google.com/go v0.110.8 // indirect | ||
| cloud.google.com/go/compute v1.23.0 // indirect | ||
| cloud.google.com/go v0.110.2 // indirect | ||
| cloud.google.com/go/compute v1.19.3 // indirect | ||
| cloud.google.com/go/compute/metadata v0.2.3 // indirect | ||
| cloud.google.com/go/iam v1.1.2 // indirect | ||
| cloud.google.com/go/storage v1.33.0 // indirect | ||
| cloud.google.com/go/iam v1.0.1 // indirect | ||
| cloud.google.com/go/storage v1.30.1 // indirect | ||
| github.com/BurntSushi/toml v1.0.0 // indirect | ||
| github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883 // indirect | ||
| github.com/aws/aws-sdk-go v1.44.264 // indirect | ||
| github.com/beorn7/perks v1.0.1 // indirect | ||
| github.com/blendle/zapdriver v1.3.1 // indirect | ||
| github.com/cespare/xxhash/v2 v2.2.0 // indirect | ||
| github.com/coreos/go-semver v0.3.0 // indirect | ||
| github.com/coreos/go-systemd/v22 v22.4.0 // indirect | ||
| github.com/coreos/go-systemd/v22 v22.3.2 // indirect | ||
| github.com/davecgh/go-spew v1.1.1 // indirect | ||
| github.com/emicklei/go-restful/v3 v3.10.2 // indirect | ||
| github.com/evanphx/json-patch v5.6.0+incompatible // indirect | ||
| github.com/evanphx/json-patch/v5 v5.7.0 // indirect | ||
| github.com/evanphx/json-patch/v5 v5.6.0 // indirect | ||
| github.com/fsnotify/fsnotify v1.6.0 // indirect | ||
| github.com/go-logr/zapr v1.2.4 // indirect | ||
| github.com/go-openapi/jsonpointer v0.19.6 // indirect | ||
|
|
@@ -62,10 +64,10 @@ require ( | |
| github.com/google/go-containerregistry v0.15.2 // indirect | ||
| github.com/google/gofuzz v1.2.0 // indirect | ||
| github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 // indirect | ||
| github.com/google/s2a-go v0.1.7 // indirect | ||
| github.com/google/uuid v1.3.1 // indirect | ||
| github.com/googleapis/enterprise-certificate-proxy v0.3.1 // indirect | ||
| github.com/googleapis/gax-go/v2 v2.12.0 // indirect | ||
| github.com/google/s2a-go v0.1.3 // indirect | ||
| github.com/google/uuid v1.3.0 // indirect | ||
| github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect | ||
| github.com/googleapis/gax-go/v2 v2.8.0 // indirect | ||
| github.com/googleapis/google-cloud-go-testing v0.0.0-20210719221736-1c9a4c676720 // indirect | ||
| github.com/hashicorp/hcl v1.0.0 // indirect | ||
| github.com/imdario/mergo v0.3.15 // indirect | ||
|
|
@@ -85,76 +87,61 @@ require ( | |
| github.com/pelletier/go-toml v1.9.4 // indirect | ||
| github.com/pelletier/go-toml/v2 v2.0.0-beta.8 // indirect | ||
| github.com/pmezard/go-difflib v1.0.0 // indirect | ||
| github.com/prometheus/client_golang v1.17.0 // indirect | ||
| github.com/prometheus/client_model v0.4.1-0.20230718164431-9a2bf3000d16 // indirect | ||
| github.com/prometheus/common v0.44.0 // indirect | ||
| github.com/prometheus/procfs v0.11.1 // indirect | ||
| github.com/prometheus/client_golang v1.15.1 // indirect | ||
| github.com/prometheus/client_model v0.4.0 // indirect | ||
| github.com/prometheus/common v0.43.0 // indirect | ||
| github.com/prometheus/procfs v0.9.0 // indirect | ||
| github.com/sergi/go-diff v1.2.0 // indirect | ||
| github.com/spf13/afero v1.8.2 // indirect | ||
| github.com/spf13/cast v1.4.1 // indirect | ||
| github.com/spf13/jwalterweatherman v1.1.0 // indirect | ||
| github.com/spf13/pflag v1.0.5 // indirect | ||
| github.com/subosito/gotenv v1.2.0 // indirect | ||
| go.etcd.io/etcd/client/pkg/v3 v3.5.9 // indirect | ||
| go.etcd.io/etcd/client/pkg/v3 v3.5.5 // indirect | ||
| go.opencensus.io v0.24.0 // indirect | ||
| go.uber.org/multierr v1.11.0 // indirect | ||
| go.uber.org/zap v1.26.0 // indirect | ||
| go.uber.org/zap v1.24.0 // indirect | ||
| golang.org/x/crypto v0.14.0 // indirect | ||
| golang.org/x/net v0.17.0 // indirect | ||
| golang.org/x/oauth2 v0.13.0 // indirect | ||
| golang.org/x/sync v0.4.0 // indirect | ||
| golang.org/x/oauth2 v0.8.0 // indirect | ||
| golang.org/x/sys v0.15.0 // indirect | ||
| golang.org/x/term v0.15.0 // indirect | ||
| golang.org/x/text v0.14.0 // indirect | ||
| golang.org/x/time v0.3.0 // indirect | ||
| golang.org/x/tools v0.14.0 // indirect | ||
| golang.org/x/tools v0.9.1 // indirect | ||
| golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect | ||
| gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect | ||
| google.golang.org/api v0.147.0 // indirect | ||
| gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect | ||
| google.golang.org/api v0.122.0 // indirect | ||
| google.golang.org/appengine v1.6.7 // indirect | ||
| google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97 // indirect | ||
| google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97 // indirect | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c // indirect | ||
| google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect | ||
| gopkg.in/inf.v0 v0.9.1 // indirect | ||
| gopkg.in/ini.v1 v1.66.4 // indirect | ||
| gopkg.in/yaml.v2 v2.4.0 // indirect | ||
| gopkg.in/yaml.v3 v3.0.1 // indirect | ||
| k8s.io/apiextensions-apiserver v0.27.6 // indirect | ||
| k8s.io/component-base v0.27.6 // indirect | ||
| k8s.io/apiextensions-apiserver v0.26.4 // indirect | ||
| k8s.io/component-base v0.26.4 // indirect | ||
| k8s.io/klog/v2 v2.100.1 // indirect | ||
| k8s.io/kube-openapi v0.0.0-20230515203736-54b630e78af5 // indirect | ||
| k8s.io/utils v0.0.0-20230505201702-9f6742963106 // indirect | ||
| knative.dev/networking v0.0.0-20231017124814-2a7676e912b7 // indirect | ||
| knative.dev/networking v0.0.0-20231012063223-0b0f2107abef // indirect | ||
| knative.dev/serving v0.37.1 // indirect | ||
| sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect | ||
| sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect | ||
| ) | ||
|
|
||
| // Fixes CVE-2022-21698 and CVE-2023-45142 | ||
| // this dependency comes from k8s.io/[email protected] and k8s.io/[email protected] | ||
| // before removing it make sure that the next version of the related k8s dependencies contains the fix | ||
| replace go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp => go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0 | ||
|
|
||
| // Update Go Crypto to avoid CVE-2022-27191, CVE-2021-43565, CVE-2020-29652, CVE-2023-48795 | ||
| replace golang.org/x/crypto => golang.org/x/crypto v0.17.0 | ||
|
|
||
| // Update Go Networking to avoid CVE-2023-44487 and CVE-2023-39325 | ||
| replace golang.org/x/net => golang.org/x/net v0.17.0 | ||
|
|
||
| // Update knative/serving to avoid CVE-2023-48713 | ||
| replace knative.dev/serving => knative.dev/serving v0.39.3 | ||
|
|
||
| // Fixes github.com/elazarl/goproxy Denial of Service (DoS) | ||
| // This dependency was removed from apimachinery 0.27.0 | ||
| // remove after upgrade to controller-runtime 0.15.x or apimachinery to 0.27.x | ||
| replace k8s.io/apimachinery => k8s.io/apimachinery v0.27.0 | ||
|
|
||
| // kserve v0.11.2 needs controller-runtime v0.14.7 (< v0.15.0) | ||
| // but controller-runtime v0.14.7 does not work with k8s.io/client-go >= v0.27.0 | ||
| // https://github.com/kubernetes-sigs/controller-runtime/issues/2302 | ||
| // https://github.com/kubernetes-sigs/controller-runtime/commit/13bba74 | ||
| replace ( | ||
| k8s.io/api => k8s.io/api v0.26.4 | ||
| k8s.io/client-go => k8s.io/client-go v0.26.4 | ||
| k8s.io/code-generator => k8s.io/code-generator v0.26.4 | ||
| // Fixes CVE-2022-21698 and CVE-2023-45142 | ||
| // this dependency comes from k8s.io/[email protected] and k8s.io/[email protected] | ||
| // before removing it make sure that the next version of the related k8s dependencies contains the fix | ||
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp => go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0 | ||
| // Update Go Crypto to avoid CVE-2022-27191, CVE-2021-43565, CVE-2020-29652, CVE-2023-48795 | ||
| golang.org/x/crypto => golang.org/x/crypto v0.17.0 | ||
| // Update Go Networking to avoid CVE-2023-44487 and CVE-2023-39325 | ||
| golang.org/x/net => golang.org/x/net v0.17.0 | ||
| // remove when upgrade to controller-runtime 0.15.x or apimachinery to 0.27.x | ||
| // Fixes github.com/elazarl/goproxy Denial of Service (DoS) | ||
| // This dependency was removed from apimachinery 0.27.0 | ||
| k8s.io/apimachinery => k8s.io/apimachinery v0.27.0 | ||
| // Fixes CVE-2023-48713 | ||
| knative.dev/serving => knative.dev/serving v0.37.5 | ||
| ) | ||
Oops, something went wrong.