Skip to content

Commit 45e7f2e

Browse files
dimsclaude
andcommitted
Fix Kubernetes security vulnerabilities in labeler-module
- Update k8s.io/kubernetes from v1.32.0 to v1.32.9 - Run dependencies-sync to ensure all modules are properly updated - This addresses vulnerabilities GO-2025-3915 and GO-2025-3774 The update fixes the original vulnerabilities found by govulncheck: - GO-2025-3915: Kubernetes Nodes can delete themselves by adding OwnerReference - GO-2025-3774: Kubernetes allows nodes to bypass dynamic resource allocation authorization Note: Two newer vulnerabilities (GO-2025-3547, GO-2025-3521) remain with "Fixed in: N/A" indicating these are recent issues without available fixes yet. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]> Signed-off-by: Davanum Srinivas <[email protected]>
1 parent 5cf0fbe commit 45e7f2e

File tree

2 files changed

+9
-11
lines changed

2 files changed

+9
-11
lines changed

labeler-module/go.mod

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,12 @@ require (
1212
k8s.io/api v0.34.1
1313
k8s.io/apimachinery v0.34.1
1414
k8s.io/client-go v0.34.1
15-
k8s.io/kubernetes v1.32.0
15+
k8s.io/kubernetes v1.32.9
1616
sigs.k8s.io/controller-runtime v0.22.3
1717
)
1818

1919
require (
20+
github.com/Masterminds/semver/v3 v3.4.0 // indirect
2021
github.com/beorn7/perks v1.0.1 // indirect
2122
github.com/cespare/xxhash/v2 v2.3.0 // indirect
2223
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
@@ -41,30 +42,27 @@ require (
4142
github.com/gogo/protobuf v1.3.2 // indirect
4243
github.com/google/gnostic-models v0.7.0 // indirect
4344
github.com/google/go-cmp v0.7.0 // indirect
44-
github.com/google/pprof v0.0.0-20251007162407-5df77e3f7d1d // indirect
4545
github.com/google/uuid v1.6.0 // indirect
4646
github.com/json-iterator/go v1.1.12 // indirect
4747
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
4848
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
4949
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
50-
github.com/onsi/ginkgo/v2 v2.26.0 // indirect
51-
github.com/onsi/gomega v1.38.2 // indirect
5250
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
5351
github.com/prometheus/client_model v0.6.2 // indirect
54-
github.com/prometheus/common v0.67.1 // indirect
52+
github.com/prometheus/common v0.67.2 // indirect
5553
github.com/prometheus/procfs v0.17.0 // indirect
56-
github.com/rogpeppe/go-internal v1.14.1 // indirect
5754
github.com/spf13/pflag v1.0.10 // indirect
5855
github.com/x448/float16 v0.8.4 // indirect
56+
go.uber.org/automaxprocs v1.6.0 // indirect
5957
go.yaml.in/yaml/v2 v2.4.3 // indirect
6058
go.yaml.in/yaml/v3 v3.0.4 // indirect
59+
golang.org/x/mod v0.29.0 // indirect
6160
golang.org/x/net v0.46.0 // indirect
6261
golang.org/x/oauth2 v0.32.0 // indirect
6362
golang.org/x/sys v0.37.0 // indirect
6463
golang.org/x/term v0.36.0 // indirect
6564
golang.org/x/text v0.30.0 // indirect
6665
golang.org/x/time v0.14.0 // indirect
67-
golang.org/x/tools v0.38.0 // indirect
6866
google.golang.org/protobuf v1.36.10 // indirect
6967
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
7068
gopkg.in/inf.v0 v0.9.1 // indirect

labeler-module/go.sum

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -94,8 +94,8 @@ github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h
9494
github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
9595
github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
9696
github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
97-
github.com/prometheus/common v0.67.1 h1:OTSON1P4DNxzTg4hmKCc37o4ZAZDv0cfXLkOt0oEowI=
98-
github.com/prometheus/common v0.67.1/go.mod h1:RpmT9v35q2Y+lsieQsdOh5sXZ6ajUGC8NjZAmr8vb0Q=
97+
github.com/prometheus/common v0.67.2 h1:PcBAckGFTIHt2+L3I33uNRTlKTplNzFctXcWhPyAEN8=
98+
github.com/prometheus/common v0.67.2/go.mod h1:63W3KZb1JOKgcjlIr64WW/LvFGAqKPj0atm+knVGEko=
9999
github.com/prometheus/procfs v0.17.0 h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7DuK0=
100100
github.com/prometheus/procfs v0.17.0/go.mod h1:oPQLaDAMRbA+u8H5Pbfq+dl3VDAvHxMUOVhe0wYB2zw=
101101
github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
@@ -192,8 +192,8 @@ k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
192192
k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
193193
k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=
194194
k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
195-
k8s.io/kubernetes v1.32.0 h1:4BDBWSolqPrv8GC3YfZw0CJvh5kA1TPnoX0FxDVd+qc=
196-
k8s.io/kubernetes v1.32.0/go.mod h1:tiIKO63GcdPRBHW2WiUFm3C0eoLczl3f7qi56Dm1W8I=
195+
k8s.io/kubernetes v1.32.9 h1:w4Zv/2dVwQKUqCZOSBnMzjMYZQ33TNuSZvbkJ9HEaGE=
196+
k8s.io/kubernetes v1.32.9/go.mod h1:REY0Gok66BTTrbGyZaFMNKO9JhxvgBDW9B7aksWRFoY=
197197
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
198198
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
199199
sigs.k8s.io/controller-runtime v0.22.3 h1:I7mfqz/a/WdmDCEnXmSPm8/b/yRTy6JsKKENTijTq8Y=

0 commit comments

Comments
 (0)