From 7f2021fc8b95d86a0e692bdb6581a665bc983c47 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts[bot]@users.noreply.github.com> Date: Fri, 13 Dec 2024 21:04:37 +0000 Subject: [PATCH] kubevela/1.9.13-r2: cve remediation (#36968) kubevela/1.9.13-r2: fix GHSA-v778-237x-gjrc Advisory data: https://github.com/wolfi-dev/advisories/blob/main/kubevela.advisories.yaml Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com> --- kubevela.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kubevela.yaml b/kubevela.yaml index 2ef327ceb4c..95cc9e6194e 100644 --- a/kubevela.yaml +++ b/kubevela.yaml @@ -1,7 +1,7 @@ package: name: kubevela version: 1.9.13 - epoch: 2 + epoch: 3 description: KubeVela is a modern application delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable copyright: - license: Apache-2.0 @@ -31,7 +31,7 @@ pipeline: - uses: go/bump with: - deps: github.com/containerd/containerd@v1.7.11 github.com/cloudflare/circl@v1.3.7 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.46.0 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 github.com/fluxcd/source-controller/api@v0.30.0 oras.land/oras-go@v1.2.5 golang.org/x/net@v0.23.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/moby/moby@v26.1.0 + deps: github.com/containerd/containerd@v1.7.11 github.com/cloudflare/circl@v1.3.7 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.46.0 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.21.0 github.com/fluxcd/source-controller/api@v0.30.0 oras.land/oras-go@v1.2.5 golang.org/x/net@v0.23.0 github.com/hashicorp/go-retryablehttp@v0.7.7 github.com/moby/moby@v26.1.0 golang.org/x/crypto@v0.31.0 replaces: github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.11.0 github.com/docker/docker=github.com/moby/moby@v26.1.0+incompatible - uses: go/build