Commit Graph
94 Commits
Author SHA1 Message Date
renovate 6d5bac5035 fix(deps): update module k8s.io/client-go to v0.36.4 (#370)
default-request-adder / test (push) Successful in 1m25s
Unbound Release / Check Preconditions (push) Successful in 28s
Unbound Release / Create Tag (push) Skipped
default-request-adder / vulnerabilities (push) Successful in 1m5s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 45s
Unbound Release / Create Release (push) Successful in 27s
default-request-adder / build (push) Successful in 1m10s
Release / release (push) Successful in 1m17s
2026-08-24 11:19:10 +00:00
renovate 59f9170b66 fix(deps): update kubernetes monorepo to v0.36.4 (#368)
default-request-adder / test (push) Successful in 1m12s
Unbound Release / Check Preconditions (push) Successful in 27s
Unbound Release / Create Tag (push) Skipped
default-request-adder / vulnerabilities (push) Successful in 1m4s
default-request-adder / build (push) Skipped
Unbound Release / Create Release (push) Successful in 29s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 40s
Release / release (push) Successful in 1m12s
2026-08-23 14:54:15 +00:00
renovate e9c39355a0 chore(deps): update go toolchain directive to v1.27.0 (#366)
default-request-adder / test (push) Successful in 1m13s
Unbound Release / Check Preconditions (push) Successful in 24s
Unbound Release / Create Tag (push) Skipped
default-request-adder / vulnerabilities (push) Successful in 1m6s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 39s
Release / release (push) Successful in 1m32s
Unbound Release / Create Release (push) Successful in 35s
default-request-adder / build (push) Successful in 44m43s
2026-08-22 11:45:35 +00:00
renovate 19d8931f32 chore(deps): update go toolchain directive to v1.26.6 [security] (#357)
default-request-adder / vulnerabilities (push) Failing after 55s
default-request-adder / test (push) Successful in 1m1s
Unbound Release / Check Preconditions (push) Successful in 24s
Unbound Release / Create Tag (push) Skipped
default-request-adder / build (push) Skipped
Unbound Release / Create Release (push) Successful in 24s
Release / release (push) Successful in 1m19s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 48s
2026-08-14 02:02:48 +00:00
renovate 9c797c3abe fix(deps): update kubernetes monorepo to v0.36.3 (#345)
Unbound Release / Create Tag (push) Skipped
default-request-adder / test (push) Successful in 1m34s
default-request-adder / vulnerabilities (push) Successful in 1m18s
Unbound Release / Check Preconditions (push) Successful in 36s
Unbound Release / Create Release (push) Successful in 43s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m24s
Release / release (push) Successful in 30m5s
default-request-adder / build (push) Failing after 2h34m44s
2026-08-09 20:05:37 +00:00
argoyle ad5edfb17a fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0 (#347)
Unbound Release / Generate Changelog and Handle PR (push) Successful in 44s
Unbound Release / Check Preconditions (push) Successful in 26s
Unbound Release / Create Tag (push) Skipped
default-request-adder / test (push) Successful in 1m10s
Unbound Release / Create Release (push) Failing after 59s
default-request-adder / vulnerabilities (push) Successful in 1m0s
Release / release (push) Failing after 1m44s
default-request-adder / build (push) Successful in 1h3m53s
`govulncheck` was failing in CI.

## Findings

| ID | Module | Found | Fixed | Reachable |
|----|--------|-------|-------|-----------|
| [GO-2026-5970](https://pkg.go.dev/vuln/GO-2026-5970) | `golang.org/x/text` | v0.37.0 | v0.39.0 | Yes — infinite loop on invalid input, reached via `client-go` `LimitRange.Delete` -> `norm.Form.*` (`main.go:83`) |
| [GO-2026-5942](https://pkg.go.dev/vuln/GO-2026-5942) | `golang.org/x/net` | v0.55.0 | v0.56.0 | No — panic parsing invalid SVCB/HTTPS RR in `dns/dnsmessage`, required but not called |

Both are indirect dependencies, which Renovate does not bump, so they were updated with `go get` + `go mod tidy`. `golang.org/x/sys` (v0.46.0) and `golang.org/x/term` (v0.44.0) came along as transitive requirements.

## Verification

```
$ go test -race ./...
?   gitlab.com/unboundsoftware/default-request-adder  [no test files]

$ govulncheck ./...
No vulnerabilities found.
```

The pending Kubernetes v0.36.3 bump is left to its own Renovate branch.

Reviewed-on: #347
2026-08-09 19:59:14 +00:00
renovate f80c7ef5ae chore(deps): update go toolchain directive to v1.26.5 [security] (#334)
default-request-adder / vulnerabilities (push) Successful in 53s
default-request-adder / test (push) Successful in 1m4s
Release / release (push) Successful in 41s
default-request-adder / build (push) Successful in 1m18s
2026-07-15 08:39:36 +00:00
renovate fdd30c4bae fix(deps): update kubernetes monorepo to v0.36.2 (#320)
default-request-adder / test (push) Successful in 1m36s
default-request-adder / vulnerabilities (push) Successful in 1m35s
default-request-adder / build (push) Failing after 56s
Release / release (push) Successful in 57s
2026-06-15 14:29:38 +00:00
renovate 4852e861d7 chore(deps): update go toolchain directive to v1.26.4 [security] (#307)
default-request-adder / build (push) Successful in 1m2s
Release / release (push) Successful in 1m5s
default-request-adder / test (push) Successful in 2m14s
default-request-adder / vulnerabilities (push) Failing after 2m34s
2026-06-03 05:49:05 +00:00
argoyle 8202ed57f1 fix(deps): bump golang.org/x/net to v0.55.0 (#304)
Release / release (push) Successful in 57s
default-request-adder / vulnerabilities (push) Successful in 2m11s
default-request-adder / test (push) Successful in 2m13s
default-request-adder / build (push) Failing after 36m33s
Fixes **GO-2026-5026** — failure to reject ASCII-only Punycode-encoded labels in `golang.org/x/net/idna` (reachable via the k8s client `LimitRange.Delete` path).

- `golang.org/x/net` v0.53.0 → v0.55.0
- `go mod tidy` also bumped x/sys, x/term, x/text

`govulncheck ./...` → No vulnerabilities found.

Reviewed-on: #304
2026-05-25 06:23:19 +00:00
renovate 5a9a9638a2 fix(deps): update module k8s.io/apimachinery to v0.36.1 (#297)
default-request-adder / build (push) Successful in 1m14s
Release / release (push) Successful in 1m13s
default-request-adder / vulnerabilities (push) Successful in 1m46s
default-request-adder / test (push) Successful in 2m10s
2026-05-16 12:56:48 +00:00
renovate d430710e4b chore(deps): update go toolchain directive to v1.26.3 (#290)
default-request-adder / build (push) Successful in 1m5s
Release / release (push) Failing after 1m7s
default-request-adder / vulnerabilities (push) Successful in 2m12s
default-request-adder / test (push) Successful in 1m54s
2026-05-12 16:39:15 +00:00
argoyle 918e3660fd fix(deps): bump golang.org/x/net to v0.53.0 (#292)
default-request-adder / build (push) Successful in 1m12s
default-request-adder / test (push) Successful in 1m58s
Release / release (push) Failing after 47s
default-request-adder / vulnerabilities (push) Successful in 2m11s
2026-05-12 15:00:34 +00:00
renovate 02342a4830 fix(deps): update kubernetes monorepo to v0.36.0 (#288)
Release / release (push) Failing after 1m10s
default-request-adder / vulnerabilities (push) Successful in 1m43s
default-request-adder / test (push) Successful in 3m29s
default-request-adder / build (push) Failing after 23m39s
2026-04-29 15:37:56 +00:00
renovate 03c1a0821b fix(deps): update kubernetes monorepo to v0.35.4 (#283)
Release / release (push) Successful in 58s
default-request-adder / vulnerabilities (push) Successful in 1m47s
default-request-adder / test (push) Successful in 1m52s
default-request-adder / build (push) Failing after 2h31m17s
2026-04-19 09:47:49 +00:00
renovate b3a395f5fa fix(deps): update module k8s.io/apimachinery to v0.35.4 (#281)
default-request-adder / vulnerabilities (push) Successful in 1m55s
default-request-adder / test (push) Successful in 2m6s
default-request-adder / build (push) Successful in 1m1s
Release / release (push) Successful in 58s
2026-04-17 20:35:50 +00:00
renovate f4e3ff189c chore(deps): update dependency go to v1.26.2 (#273)
default-request-adder / test (push) Successful in 1m59s
default-request-adder / vulnerabilities (push) Successful in 1m51s
Release / release (push) Successful in 1m0s
default-request-adder / build (push) Successful in 56m5s
2026-04-11 02:08:32 +00:00
renovate df6e40cdb4 fix(deps): update kubernetes monorepo to v0.35.3 (#265)
default-request-adder / test (push) Successful in 2m0s
default-request-adder / vulnerabilities (push) Successful in 1m54s
Release / release (push) Successful in 1m6s
default-request-adder / build (push) Successful in 1h30m40s
2026-03-19 12:14:50 +00:00
renovate 2d0aad04b0 chore(deps): update dependency go to v1.26.1 (#250)
Release / release (push) Successful in 58s
default-request-adder / vulnerabilities (push) Successful in 2m19s
default-request-adder / build (push) Successful in 2m20s
default-request-adder / test (push) Successful in 3m0s
2026-03-06 08:10:09 +00:00
renovate 75c117a776 fix(deps): update kubernetes packages to v0.35.2 (#247)
default-request-adder / build (push) Successful in 2m17s
Release / release (push) Successful in 1m38s
default-request-adder / test (push) Successful in 4m15s
default-request-adder / vulnerabilities (push) Successful in 2m50s
2026-02-27 15:14:54 +00:00
renovate aff1826f44 fix(deps): update kubernetes packages to v0.35.1 (#241)
Release / release (push) Successful in 1m55s
default-request-adder / vulnerabilities (push) Successful in 6m41s
default-request-adder / test (push) Successful in 12m11s
default-request-adder / build (push) Failing after 1h49m35s
2026-02-11 18:11:16 +00:00
renovate fd615d4df7 chore(deps): update dependency go to v1.26.0 (#238)
Release / release (push) Failing after 43s
default-request-adder / build (push) Successful in 53s
default-request-adder / vulnerabilities (push) Successful in 1m36s
default-request-adder / test (push) Successful in 1m56s
2026-02-10 20:45:24 +00:00
renovate 6d136f9454 chore(deps): update dependency go to v1.25.7 (#235)
Release / release (push) Successful in 2m42s
default-request-adder / vulnerabilities (push) Successful in 4m10s
default-request-adder / test (push) Successful in 5m41s
default-request-adder / build (push) Successful in 3m23s
2026-02-04 17:07:23 +00:00
renovate 598566b588 chore(deps): update dependency go to v1.25.6 (#225)
Release / release (push) Successful in 1m13s
default-request-adder / build (push) Successful in 1m3s
default-request-adder / vulnerabilities (push) Successful in 4m9s
default-request-adder / test (push) Successful in 6m26s
2026-01-15 20:26:25 +00:00
Renovate a46b920377 fix(deps): update kubernetes packages to v0.35.0 2025-12-18 01:04:50 +00:00
Renovate 28fedd42d1 fix(deps): update kubernetes packages to v0.34.3 2025-12-10 05:16:34 +00:00
Renovate 4424ecd694 chore(deps): update dependency go to v1.25.5 2025-12-02 17:19:25 +00:00
Renovate 2b02b640bf fix(deps): update kubernetes packages to v0.34.2 2025-11-12 17:06:35 +00:00
Renovate 9fc1eb9432 chore(deps): update dependency go to v1.25.4 2025-11-05 20:18:37 +00:00
Renovate 39f433a995 chore(deps): update dependency go to v1.25.3 2025-10-13 22:05:12 +00:00
Renovate 59a5e7190a chore(deps): update dependency go to v1.25.2 2025-10-07 19:18:21 +00:00
Renovate 415105faef fix(deps): update kubernetes packages to v0.34.1 2025-09-10 09:03:48 +00:00
Renovate 7068fee1b7 chore(deps): update dependency go to v1.25.1 2025-09-03 19:04:31 +00:00
Renovate e06d1a100b fix(deps): update kubernetes packages to v0.34.0 2025-08-27 22:16:07 +00:00
Renovate 7b694b4fcd fix(deps): update kubernetes packages to v0.33.4 2025-08-14 10:24:50 +02:00
Renovate 8db28f6a19 chore(deps): update dependency go to v1.25.0 2025-08-12 21:05:28 +00:00
Renovate a3d4d418fe chore(deps): update dependency go to v1.24.6 2025-08-06 19:05:31 +00:00
Renovate f2a5636071 fix(deps): update kubernetes packages to v0.33.3 2025-07-16 05:09:06 +00:00
Renovate 8bfde67ee9 chore(deps): update dependency go to v1.24.5 2025-07-08 18:01:32 +00:00
Renovate 659333b0dd fix(deps): update kubernetes packages to v0.33.2 2025-06-19 17:59:40 +00:00
Renovate 4f5dcb6d50 chore(deps): update dependency go to v1.24.4 2025-06-05 19:00:52 +00:00
Renovate ebd41a21d4 fix(deps): update kubernetes packages to v0.33.1 2025-05-16 00:02:52 +00:00
Renovate ca281078c2 chore(deps): update dependency go to v1.24.3 2025-05-06 19:03:30 +00:00
Renovate 2f01b42ef3 fix(deps): update kubernetes packages to v0.33.0 2025-04-23 22:06:22 +00:00
Renovate 10d86f6739 fix(deps): update kubernetes packages to v0.32.4 2025-04-23 11:01:28 +00:00
Renovate 9bc9c34e6f fix(deps): update kubernetes packages to v0.32.3 2025-03-12 09:07:37 +00:00
Renovate be637eea7d fix(deps): update kubernetes packages to v0.32.2 2025-02-13 16:01:52 +00:00
argoyle 459c83aac1 fix(go.mod): update Go version and toolchain version
Updates the Go version from 1.23.0 to 1.23.6 to ensure compatibility and
2025-02-06 18:03:34 +01:00
Renovate 865da0c4b9 chore(deps): update dependency go to v1.23.6 2025-02-04 17:07:18 +00:00
Renovate 7e62a9a839 chore(deps): update dependency go to v1.23.5 2025-01-16 21:14:48 +00:00