Commit Graph
60 Commits
Author SHA1 Message Date
renovate 6d5bac5035 fix(deps): update module k8s.io/client-go to v0.36.4 (#370)
default-request-adder / test (push) Successful in 1m25s
Unbound Release / Check Preconditions (push) Successful in 28s
Unbound Release / Create Tag (push) Skipped
default-request-adder / vulnerabilities (push) Successful in 1m5s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 45s
Unbound Release / Create Release (push) Successful in 27s
default-request-adder / build (push) Successful in 1m10s
Release / release (push) Successful in 1m17s
2026-08-24 11:19:10 +00:00
renovate 59f9170b66 fix(deps): update kubernetes monorepo to v0.36.4 (#368)
default-request-adder / test (push) Successful in 1m12s
Unbound Release / Check Preconditions (push) Successful in 27s
Unbound Release / Create Tag (push) Skipped
default-request-adder / vulnerabilities (push) Successful in 1m4s
default-request-adder / build (push) Skipped
Unbound Release / Create Release (push) Successful in 29s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 40s
Release / release (push) Successful in 1m12s
2026-08-23 14:54:15 +00:00
renovate 9c797c3abe fix(deps): update kubernetes monorepo to v0.36.3 (#345)
Unbound Release / Create Tag (push) Skipped
default-request-adder / test (push) Successful in 1m34s
default-request-adder / vulnerabilities (push) Successful in 1m18s
Unbound Release / Check Preconditions (push) Successful in 36s
Unbound Release / Create Release (push) Successful in 43s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m24s
Release / release (push) Successful in 30m5s
default-request-adder / build (push) Failing after 2h34m44s
2026-08-09 20:05:37 +00:00
argoyle ad5edfb17a fix(deps): bump golang.org/x/text to v0.39.0 and golang.org/x/net to v0.56.0 (#347)
Unbound Release / Generate Changelog and Handle PR (push) Successful in 44s
Unbound Release / Check Preconditions (push) Successful in 26s
Unbound Release / Create Tag (push) Skipped
default-request-adder / test (push) Successful in 1m10s
Unbound Release / Create Release (push) Failing after 59s
default-request-adder / vulnerabilities (push) Successful in 1m0s
Release / release (push) Failing after 1m44s
default-request-adder / build (push) Successful in 1h3m53s
`govulncheck` was failing in CI.

## Findings

| ID | Module | Found | Fixed | Reachable |
|----|--------|-------|-------|-----------|
| [GO-2026-5970](https://pkg.go.dev/vuln/GO-2026-5970) | `golang.org/x/text` | v0.37.0 | v0.39.0 | Yes — infinite loop on invalid input, reached via `client-go` `LimitRange.Delete` -> `norm.Form.*` (`main.go:83`) |
| [GO-2026-5942](https://pkg.go.dev/vuln/GO-2026-5942) | `golang.org/x/net` | v0.55.0 | v0.56.0 | No — panic parsing invalid SVCB/HTTPS RR in `dns/dnsmessage`, required but not called |

Both are indirect dependencies, which Renovate does not bump, so they were updated with `go get` + `go mod tidy`. `golang.org/x/sys` (v0.46.0) and `golang.org/x/term` (v0.44.0) came along as transitive requirements.

## Verification

```
$ go test -race ./...
?   gitlab.com/unboundsoftware/default-request-adder  [no test files]

$ govulncheck ./...
No vulnerabilities found.
```

The pending Kubernetes v0.36.3 bump is left to its own Renovate branch.

Reviewed-on: #347
2026-08-09 19:59:14 +00:00
renovate fdd30c4bae fix(deps): update kubernetes monorepo to v0.36.2 (#320)
default-request-adder / test (push) Successful in 1m36s
default-request-adder / vulnerabilities (push) Successful in 1m35s
default-request-adder / build (push) Failing after 56s
Release / release (push) Successful in 57s
2026-06-15 14:29:38 +00:00
argoyle 8202ed57f1 fix(deps): bump golang.org/x/net to v0.55.0 (#304)
Release / release (push) Successful in 57s
default-request-adder / vulnerabilities (push) Successful in 2m11s
default-request-adder / test (push) Successful in 2m13s
default-request-adder / build (push) Failing after 36m33s
Fixes **GO-2026-5026** — failure to reject ASCII-only Punycode-encoded labels in `golang.org/x/net/idna` (reachable via the k8s client `LimitRange.Delete` path).

- `golang.org/x/net` v0.53.0 → v0.55.0
- `go mod tidy` also bumped x/sys, x/term, x/text

`govulncheck ./...` → No vulnerabilities found.

Reviewed-on: #304
2026-05-25 06:23:19 +00:00
renovate 5a9a9638a2 fix(deps): update module k8s.io/apimachinery to v0.36.1 (#297)
default-request-adder / build (push) Successful in 1m14s
Release / release (push) Successful in 1m13s
default-request-adder / vulnerabilities (push) Successful in 1m46s
default-request-adder / test (push) Successful in 2m10s
2026-05-16 12:56:48 +00:00
argoyle 918e3660fd fix(deps): bump golang.org/x/net to v0.53.0 (#292)
default-request-adder / build (push) Successful in 1m12s
default-request-adder / test (push) Successful in 1m58s
Release / release (push) Failing after 47s
default-request-adder / vulnerabilities (push) Successful in 2m11s
2026-05-12 15:00:34 +00:00
renovate 02342a4830 fix(deps): update kubernetes monorepo to v0.36.0 (#288)
Release / release (push) Failing after 1m10s
default-request-adder / vulnerabilities (push) Successful in 1m43s
default-request-adder / test (push) Successful in 3m29s
default-request-adder / build (push) Failing after 23m39s
2026-04-29 15:37:56 +00:00
renovate 03c1a0821b fix(deps): update kubernetes monorepo to v0.35.4 (#283)
Release / release (push) Successful in 58s
default-request-adder / vulnerabilities (push) Successful in 1m47s
default-request-adder / test (push) Successful in 1m52s
default-request-adder / build (push) Failing after 2h31m17s
2026-04-19 09:47:49 +00:00
renovate b3a395f5fa fix(deps): update module k8s.io/apimachinery to v0.35.4 (#281)
default-request-adder / vulnerabilities (push) Successful in 1m55s
default-request-adder / test (push) Successful in 2m6s
default-request-adder / build (push) Successful in 1m1s
Release / release (push) Successful in 58s
2026-04-17 20:35:50 +00:00
renovate df6e40cdb4 fix(deps): update kubernetes monorepo to v0.35.3 (#265)
default-request-adder / test (push) Successful in 2m0s
default-request-adder / vulnerabilities (push) Successful in 1m54s
Release / release (push) Successful in 1m6s
default-request-adder / build (push) Successful in 1h30m40s
2026-03-19 12:14:50 +00:00
renovate 75c117a776 fix(deps): update kubernetes packages to v0.35.2 (#247)
default-request-adder / build (push) Successful in 2m17s
Release / release (push) Successful in 1m38s
default-request-adder / test (push) Successful in 4m15s
default-request-adder / vulnerabilities (push) Successful in 2m50s
2026-02-27 15:14:54 +00:00
renovate aff1826f44 fix(deps): update kubernetes packages to v0.35.1 (#241)
Release / release (push) Successful in 1m55s
default-request-adder / vulnerabilities (push) Successful in 6m41s
default-request-adder / test (push) Successful in 12m11s
default-request-adder / build (push) Failing after 1h49m35s
2026-02-11 18:11:16 +00:00
Renovate a46b920377 fix(deps): update kubernetes packages to v0.35.0 2025-12-18 01:04:50 +00:00
Renovate 28fedd42d1 fix(deps): update kubernetes packages to v0.34.3 2025-12-10 05:16:34 +00:00
Renovate 2b02b640bf fix(deps): update kubernetes packages to v0.34.2 2025-11-12 17:06:35 +00:00
Renovate 415105faef fix(deps): update kubernetes packages to v0.34.1 2025-09-10 09:03:48 +00:00
Renovate e06d1a100b fix(deps): update kubernetes packages to v0.34.0 2025-08-27 22:16:07 +00:00
Renovate 7b694b4fcd fix(deps): update kubernetes packages to v0.33.4 2025-08-14 10:24:50 +02:00
Renovate f2a5636071 fix(deps): update kubernetes packages to v0.33.3 2025-07-16 05:09:06 +00:00
Renovate 659333b0dd fix(deps): update kubernetes packages to v0.33.2 2025-06-19 17:59:40 +00:00
Renovate ebd41a21d4 fix(deps): update kubernetes packages to v0.33.1 2025-05-16 00:02:52 +00:00
Renovate 2f01b42ef3 fix(deps): update kubernetes packages to v0.33.0 2025-04-23 22:06:22 +00:00
Renovate 10d86f6739 fix(deps): update kubernetes packages to v0.32.4 2025-04-23 11:01:28 +00:00
Renovate 9bc9c34e6f fix(deps): update kubernetes packages to v0.32.3 2025-03-12 09:07:37 +00:00
Renovate be637eea7d fix(deps): update kubernetes packages to v0.32.2 2025-02-13 16:01:52 +00:00
Renovate 8f8566fe93 fix(deps): update kubernetes packages to v0.32.1 2025-01-16 17:10:18 +00:00
Renovate ecee6df020 fix(deps): update kubernetes packages to v0.32.0 2024-12-12 00:07:26 +00:00
Renovate d46ba197aa fix(deps): update kubernetes packages to v0.31.4 2024-12-11 03:10:21 +00:00
Renovate d7f4b459f3 fix(deps): update kubernetes packages to v0.31.3 2024-11-21 08:58:46 +00:00
Renovate cb1d48e65e fix(deps): update kubernetes packages to v0.31.2 2024-10-23 16:58:18 +00:00
Renovate 1f7a7e4b4c fix(deps): update kubernetes packages to v0.31.1 2024-09-12 07:59:18 +00:00
Renovate 0b9e13c109 fix(deps): update kubernetes packages to v0.31.0 2024-08-13 18:27:23 +00:00
Renovate 79e36f6599 fix(deps): update kubernetes packages to v0.30.3 2024-07-17 22:57:17 +00:00
Renovate 5177f4351f fix(deps): update kubernetes packages to v0.30.2 2024-06-12 20:02:52 +00:00
Renovate 9250534ed0 fix(deps): update kubernetes packages to v0.30.1 2024-05-15 13:58:30 +00:00
Renovate 2d420179db fix(deps): update kubernetes packages to v0.30.0 2024-04-18 11:30:33 +00:00
Renovate 4fa1fdb6c3 fix(deps): update module k8s.io/client-go to v0.29.4 2024-04-17 01:57:11 +00:00
Renovate 9fe075b085 fix(deps): update kubernetes packages to v0.29.3 2024-03-15 23:55:12 +00:00
argoyle 37a326641b Bump k8s.io/client-go from 0.29.1 to 0.29.2
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.29.1 to 0.29.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.29.1...v0.29.2)
2024-02-15 15:14:03 +00:00
argoyle d045e7c445 Bump k8s.io/client-go from 0.29.0 to 0.29.1
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.29.0 to 0.29.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.29.0...v0.29.1)
2024-01-18 15:14:32 +00:00
argoyle a1fd2effa1 Bump k8s.io/client-go from 0.28.4 to 0.29.0
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.4 to 0.29.0.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.4...v0.29.0)
2023-12-14 15:14:25 +00:00
argoyle bce30116bb Bump k8s.io/client-go from 0.28.3 to 0.28.4
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.3 to 0.28.4.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.3...v0.28.4)
2023-11-16 15:14:17 +00:00
argoyle 5de1705250 Bump k8s.io/client-go from 0.28.2 to 0.28.3
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.2 to 0.28.3.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.2...v0.28.3)
2023-10-19 15:14:11 +00:00
argoyle 3e515cfb30 [Security] Bump golang.org/x/net from 0.13.0 to 0.17.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.13.0 to 0.17.0. **This update includes a security fix.**
- [Commits](https://github.com/golang/net/compare/v0.13.0...v0.17.0)
2023-10-12 15:13:42 +00:00
argoyle 9a6ff3bf47 Bump k8s.io/client-go from 0.28.1 to 0.28.2
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.1 to 0.28.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.1...v0.28.2)
2023-09-14 15:14:04 +00:00
argoyle b2f588ea6e Bump k8s.io/client-go from 0.28.0 to 0.28.1
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.0 to 0.28.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.0...v0.28.1)
2023-08-25 15:13:58 +00:00
argoyle 3235d1c3dd Bump k8s.io/client-go from 0.27.4 to 0.28.0
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.27.4 to 0.28.0.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.27.4...v0.28.0)
2023-08-16 15:13:53 +00:00
argoyle 797ff7cb89 Bump k8s.io/client-go from 0.27.3 to 0.27.4
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.27.3 to 0.27.4.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.27.3...v0.27.4)
2023-07-20 15:14:24 +00:00