Граф коммитов

200 Коммитов

Автор SHA1 Сообщение Дата
Anish Ramasekar 2b68d2ffd6
ci: use msi to authenticate with keyvault (cleanup) (#379)
- PR to cleanup references to `AZURE_CLIENT_ID` and
`AZURE_CLIENT_SECRET` in the pipelines.
- Also using this to validate pipelines work as expected after removing
the client id and secret variables from library.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-05-07 15:54:07 -07:00
Anish Ramasekar 0204d020db
ci: use msi to authenticate with keyvault (#378)
- use msi to authenticate with keyvault

As we're using kind clusters for CI, we can leverage the ado-agent
identity to authenticate with keyvault. With this change, we can get rid
of the service principal.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-05-07 15:36:09 -07:00
Anish Ramasekar d59c3e077e
ci: bump ossf/scorecard-action to v2.3.1 (#366)
Updating `ossf/scorecard-action` to latest (v2.3.1) to resolves
[failures](https://github.com/Azure/kubernetes-kms/actions/runs/8742259890/job/23990093097).

xref: https://github.com/ossf/scorecard-action/issues/997

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-04-19 08:44:04 -04:00
Anish Ramasekar d2c4dac44f
release: bump version to v0.7.0 (#365)
- bump version to `v0.7.0`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-04-18 10:31:15 -07:00
Anish Ramasekar 17e660efcf
security: bump golang.org/x/net to v0.23.0+ to fix CVE-2023-45288 (#364)
- bump golang.org/x/net to v0.23.0+ to fix CVE-2023-45288

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-04-18 16:46:35 +00:00
dependabot[bot] 042a175552
chore: bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#349)
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/protobuf&package-manager=go_modules&previous-version=1.31.0&new-version=1.33.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Azure/kubernetes-kms/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-13 23:56:59 +00:00
Anish Ramasekar 2dda9f78ec
release: bump version to v0.6.0 (#342)
- bump version to `v0.6.0`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-22 00:49:00 +00:00
Anish Ramasekar 8130ca07a9
security: bump golang.org/x/crypto to v0.17.0 to fix CVE-2023-48795 (#341)
- bump golang.org/x/crypto to v0.17.0 to fix CVE-2023-48795

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-21 16:40:12 -08:00
Sertaç Özercan 34e0c1c80f
chore: switch to using mcr image (#321)
<!-- Thank you for helping KMS Plugin for Key Vault with a pull request!
-->

**Reason for Change**:
<!-- What does this PR improve or fix in KMS Plugin for Key Vault? Why
is it needed? -->


**Issue Fixed**: Fixes #320
<!-- If this PR fixes GitHub issue 1234, add "Fixes #1234" to the next
line. -->

**Notes for Reviewers**:

Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
2023-12-11 22:29:09 -08:00
Anish Ramasekar 014af7eac0
chore: update to go1.21 (#319)
- update to go 1.21.4
- switch to using mcr image for golang builder

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-13 23:37:29 -08:00
Nilekh Chaudhari 3d46bb86e6
feat: Integration tests for KMS v2 (#238)
<!-- Thank you for helping KMS Plugin for Key Vault with a pull request!
-->

**Reason for Change**:
<!-- What does this PR improve or fix in KMS Plugin for Key Vault? Why
is it needed? -->


**Issue Fixed**:
<!-- If this PR fixes GitHub issue 1234, add "Fixes #1234" to the next
line. -->
Fixes #237 

**Notes for Reviewers**:

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-08-09 19:36:10 +00:00
Nilekh Chaudhari c0e39e704d
feat: implements mlog (#241)
<!-- Thank you for helping KMS Plugin for Key Vault with a pull request!
-->

**Reason for Change**:
<!-- What does this PR improve or fix in KMS Plugin for Key Vault? Why
is it needed? -->
The logging process will be moved to mlog to provide users with better
control over log levels.


**Issue Fixed**:
<!-- If this PR fixes GitHub issue 1234, add "Fixes #1234" to the next
line. -->
fixes https://github.com/Azure/kubernetes-kms/issues/236

**Notes for Reviewers**:

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-08-09 15:29:59 -04:00
Anish Ramasekar f1c6590a11
docs: use control plane instead of master (#270)
xref:
https://github.com/kubernetes/community/blob/master/sig-architecture/naming/recommendations/001-master-control-plane.md

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-08-09 10:39:53 -07:00
Nilekh Chaudhari 84fa3b742a
release: bump version to v0.5.0 (#240)
<!-- Thank you for helping KMS Plugin for Key Vault with a pull request!
-->

**Reason for Change**:
<!-- What does this PR improve or fix in KMS Plugin for Key Vault? Why
is it needed? -->
- bump version to v0.5.0

**Issue Fixed**:
<!-- If this PR fixes GitHub issue 1234, add "Fixes #1234" to the next
line. -->

**Notes for Reviewers**:

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-05-17 13:44:51 -07:00
Nilekh Chaudhari 71ea631f5a
feat: implements kms v2beta1 APIs (#210)
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-05-17 11:39:02 -07:00
Anish Ramasekar 5e07862fe4
chore: use `dl.k8s.io` instead of hardcoded url (#235)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-05-12 14:56:28 -07:00
Nilekh Chaudhari e2b1486074
chore: adds @enj (#211)
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
2023-05-04 12:36:30 -07:00
dependabot[bot] 268ac2465a
chore: bump distroless/static from `149531e` to `9ecc53c` (#231)
Bumps distroless/static from `149531e` to `9ecc53c`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 09:48:16 -07:00
Anish Ramasekar 9d080d2a18
docs: add openssf badge (#229)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-04-27 13:02:03 -07:00
StepSecurity Bot a6b962ef9d
ci: [StepSecurity] Apply security best practices (#222)
* [StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

* Update dependabot.yml

Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>

---------

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
2023-04-27 11:55:09 -07:00
Anish Ramasekar b1994cb917
ci: make semantic check title only (#223) 2023-04-27 11:05:34 -07:00
Nilekh Chaudhari e1976fc63c
feat: adds CodeQL (#221)
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-04-25 17:42:36 -07:00
Danny Brito 6b74492dbb
chore: remove manual gettext/envsubst install (#219) 2023-04-21 11:42:44 -07:00
Anish Ramasekar f57300d4d4
ci: switch to using mariner pool (#218)
* ci: switch to using mariner pool

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* ci: install envsubst

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-04-20 10:54:22 -07:00
Sertaç Özercan e77adb6874
chore: update linters (#217)
* chore: update linters

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

* Apply suggestions from code review

Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>

* Update .golangci.yml

Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>

* fix formatting

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

---------

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Signed-off-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-04-19 11:18:40 -07:00
Nilekh Chaudhari e4f695b64f
chore: updates lint (#212)
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-04-11 15:19:53 -07:00
Xander Grzywinski 59a0d7468b
docs: add roadmap link to readme (#209) 2023-03-29 11:19:52 -07:00
dependabot[bot] b5c9c03838
chore: bump github.com/Azure/go-autorest/autorest/adal (#208)
Bumps [github.com/Azure/go-autorest/autorest/adal](https://github.com/Azure/go-autorest) from 0.9.22 to 0.9.23.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/autorest/adal/v0.9.22...autorest/adal/v0.9.23)

---
updated-dependencies:
- dependency-name: github.com/Azure/go-autorest/autorest/adal
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 11:57:09 -07:00
dependabot[bot] 30acbf3316
chore: bump k8s.io/apiserver from 0.25.7 to 0.25.8 (#207)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.7 to 0.25.8.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.7...v0.25.8)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 11:45:30 -07:00
dependabot[bot] dc597a2ff2
chore: bump k8s.io/apiserver from 0.25.6 to 0.25.7 (#205)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.6 to 0.25.7.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.6...v0.25.7)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 10:13:43 -08:00
dependabot[bot] 6afb9ba43f
chore: bump golang.org/x/text from 0.3.7 to 0.3.8 in /tools (#203) 2023-02-22 18:17:04 -08:00
dependabot[bot] f7e64ce94a
chore: bump golang.org/x/net from 0.4.0 to 0.7.0 (#202) 2023-02-21 21:57:41 -08:00
dependabot[bot] a87a4541ed
chore: bump github.com/Azure/azure-sdk-for-go (#200)
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 67.3.0+incompatible to 68.0.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v67.3.0...v68.0.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-03 13:34:15 -08:00
Rita Zhang 68490e2255
docs: update AKS feature (#201)
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-02-03 09:24:12 -08:00
dependabot[bot] 14d600d358
chore: bump github.com/Azure/go-autorest/autorest/adal (#199)
Bumps [github.com/Azure/go-autorest/autorest/adal](https://github.com/Azure/go-autorest) from 0.9.21 to 0.9.22.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/autorest/adal/v0.9.21...autorest/adal/v0.9.22)

---
updated-dependencies:
- dependency-name: github.com/Azure/go-autorest/autorest/adal
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-23 12:21:33 -08:00
dependabot[bot] e78c4f1a7d
chore: bump k8s.io/apiserver from 0.25.5 to 0.25.6 (#198)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.5 to 0.25.6.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.5...v0.25.6)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-23 09:48:56 -08:00
dependabot[bot] 095042e5b2
chore: bump github.com/Azure/azure-sdk-for-go (#196)
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 67.2.0+incompatible to 67.3.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v67.2.0...v67.3.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 11:38:58 -08:00
Anish Ramasekar 333b0821d8
release: bump version to v0.4.0 (#194)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-12-20 12:00:36 -08:00
dependabot[bot] b3d9753129
chore: bump github.com/Azure/azure-sdk-for-go (#192)
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 67.1.0+incompatible to 67.2.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v67.1.0...v67.2.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-19 11:55:00 -08:00
Anish Ramasekar 483ca98413 ci: update kubernetes versions for supported releases
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-12-19 11:38:14 -08:00
Anish Ramasekar 2cefbfe7ba ci: remove kubernetes version 1.22 (EOL)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-12-19 11:38:14 -08:00
Anish Ramasekar b3a62d8aa1 ci: enable tests with kubernetes v1.26
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-12-19 11:38:14 -08:00
Anish Ramasekar b925b99467
security: fix CVE-2022-41717 (#193)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-12-19 11:32:17 -08:00
dependabot[bot] 371e85b1e8
chore: bump k8s.io/apiserver from 0.25.4 to 0.25.5 (#190)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.4 to 0.25.5.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.4...v0.25.5)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 21:07:01 -08:00
dependabot[bot] 848d605af7
chore: bump github.com/Azure/azure-sdk-for-go (#188)
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 67.0.0+incompatible to 67.1.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v67.0.0...v67.1.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-28 11:37:22 -08:00
dependabot[bot] f2f76db8e8
chore: bump k8s.io/apiserver from 0.25.2 to 0.25.4 (#187)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.2 to 0.25.4.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.2...v0.25.4)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-14 10:51:49 -08:00
dependabot[bot] 887fab896e
chore: bump github.com/Azure/azure-sdk-for-go (#182)
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 66.0.0+incompatible to 67.0.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v66.0.0...v67.0.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-17 13:24:34 -07:00
dependabot[bot] f211190340
chore: bump k8s.io/component-base from 0.25.2 to 0.25.3 (#181)
Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.25.2 to 0.25.3.
- [Release notes](https://github.com/kubernetes/component-base/releases)
- [Commits](https://github.com/kubernetes/component-base/compare/v0.25.2...v0.25.3)

---
updated-dependencies:
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-17 13:17:25 -07:00
Anish Ramasekar ee7a02437d
security: fix CVE-2022-32149 (#185)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-10-17 13:09:28 -07:00
dependabot[bot] ed01f4733f
chore: bump k8s.io/apiserver from 0.25.1 to 0.25.2 (#178)
Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.25.1 to 0.25.2.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.25.1...v0.25.2)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-26 14:46:34 -07:00