Skip to content

Commit 43002ec

Browse files
authored
fix: Bump Helm dependency to fix CVEs (#1398)
**What problem does this PR solve?**: Fixes govulncheck failures fix: Bump Helm dependency to fix CVEs This commit addresses security vulnerabilities by updating the Helm dependency: * https://pkg.go.dev/vuln/GO-2025-3601 * https://pkg.go.dev/vuln/GO-2025-3601 fix: Bump Helm dependency to fix CVEs This commit addresses security vulnerabilities by updating the containerd dependency: * https://pkg.go.dev/vuln/GO-2025-4108 * https://pkg.go.dev/vuln/GO-2025-3528 **Which issue(s) this PR fixes**: Fixes # **How Has This Been Tested?**: <!-- Please describe the tests that you ran to verify your changes. Provide output from the tests and any manual steps needed to replicate the tests. --> **Special notes for your reviewer**: <!-- Use this to provide any additional information to the reviewers. This may include: - Best way to review the PR. - Where the author wants the most review attention on. - etc. -->
1 parent f589e36 commit 43002ec

File tree

5 files changed

+139
-180
lines changed

5 files changed

+139
-180
lines changed

go.mod

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -33,12 +33,12 @@ require (
3333
github.com/spf13/pflag v1.0.10
3434
github.com/stretchr/testify v1.11.1
3535
gopkg.in/yaml.v2 v2.4.0
36-
helm.sh/helm/v3 v3.16.1
36+
helm.sh/helm/v3 v3.17.4
3737
k8s.io/api v0.32.9
3838
k8s.io/apiextensions-apiserver v0.32.9
3939
k8s.io/apimachinery v0.32.9
4040
k8s.io/apiserver v0.32.9
41-
k8s.io/cli-runtime v0.31.0
41+
k8s.io/cli-runtime v0.32.2
4242
k8s.io/client-go v0.32.9
4343
k8s.io/component-base v0.32.9
4444
k8s.io/klog/v2 v2.130.1
@@ -62,8 +62,7 @@ require (
6262
github.com/Masterminds/semver/v3 v3.4.0 // indirect
6363
github.com/Masterminds/sprig/v3 v3.3.0 // indirect
6464
github.com/Masterminds/squirrel v1.5.4 // indirect
65-
github.com/Microsoft/go-winio v0.6.1 // indirect
66-
github.com/Microsoft/hcsshim v0.11.4 // indirect
65+
github.com/Microsoft/go-winio v0.6.2 // indirect
6766
github.com/PaesslerAG/gval v1.0.0 // indirect
6867
github.com/PaesslerAG/jsonpath v0.1.1 // indirect
6968
github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8 // indirect
@@ -79,9 +78,11 @@ require (
7978
github.com/cespare/xxhash/v2 v2.3.0 // indirect
8079
github.com/chai2010/gettext-go v1.0.2 // indirect
8180
github.com/cloudflare/circl v1.6.1 // indirect
82-
github.com/containerd/containerd v1.7.12 // indirect
81+
github.com/containerd/containerd v1.7.29 // indirect
82+
github.com/containerd/errdefs v0.3.0 // indirect
8383
github.com/containerd/log v0.1.0 // indirect
84-
github.com/cyphar/filepath-securejoin v0.3.1 // indirect
84+
github.com/containerd/platforms v0.2.1 // indirect
85+
github.com/cyphar/filepath-securejoin v0.3.6 // indirect
8586
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
8687
github.com/distribution/reference v0.6.0 // indirect
8788
github.com/docker/cli v25.0.1+incompatible // indirect
@@ -96,7 +97,7 @@ require (
9697
github.com/emicklei/go-restful/v3 v3.12.2 // indirect
9798
github.com/evanphx/json-patch v5.9.0+incompatible // indirect
9899
github.com/evanphx/json-patch/v5 v5.9.11 // indirect
99-
github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
100+
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
100101
github.com/fatih/color v1.18.0 // indirect
101102
github.com/felixge/httpsnoop v1.0.4 // indirect
102103
github.com/fsnotify/fsnotify v1.8.0 // indirect
@@ -178,7 +179,7 @@ require (
178179
github.com/prometheus/common v0.55.0 // indirect
179180
github.com/prometheus/procfs v0.15.1 // indirect
180181
github.com/rivo/uniseg v0.4.2 // indirect
181-
github.com/rubenv/sql-migrate v1.7.0 // indirect
182+
github.com/rubenv/sql-migrate v1.7.1 // indirect
182183
github.com/russross/blackfriday/v2 v2.1.0 // indirect
183184
github.com/sagikazarmark/locafero v0.7.0 // indirect
184185
github.com/shopspring/decimal v1.4.0 // indirect
@@ -206,7 +207,6 @@ require (
206207
go.opentelemetry.io/otel/sdk v1.29.0 // indirect
207208
go.opentelemetry.io/otel/trace v1.29.0 // indirect
208209
go.opentelemetry.io/proto/otlp v1.3.1 // indirect
209-
go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
210210
go.uber.org/automaxprocs v1.6.0 // indirect
211211
go.uber.org/multierr v1.11.0 // indirect
212212
go.uber.org/zap v1.27.0 // indirect
@@ -216,12 +216,12 @@ require (
216216
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
217217
golang.org/x/mod v0.27.0 // indirect
218218
golang.org/x/net v0.43.0 // indirect
219-
golang.org/x/oauth2 v0.28.0 // indirect
219+
golang.org/x/oauth2 v0.30.0 // indirect
220220
golang.org/x/sync v0.16.0 // indirect
221221
golang.org/x/sys v0.35.0 // indirect
222222
golang.org/x/term v0.34.0 // indirect
223223
golang.org/x/text v0.28.0 // indirect
224-
golang.org/x/time v0.8.0 // indirect
224+
golang.org/x/time v0.12.0 // indirect
225225
golang.org/x/tools v0.36.0 // indirect
226226
gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
227227
google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
@@ -233,12 +233,12 @@ require (
233233
gopkg.in/yaml.v3 v3.0.1 // indirect
234234
k8s.io/cluster-bootstrap v0.32.3 // indirect
235235
k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
236-
k8s.io/kubectl v0.31.0 // indirect
236+
k8s.io/kubectl v0.32.2 // indirect
237237
oras.land/oras-go v1.2.5 // indirect
238238
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0 // indirect
239239
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
240240
sigs.k8s.io/kind v0.27.0 // indirect
241-
sigs.k8s.io/kustomize/api v0.17.2 // indirect
242-
sigs.k8s.io/kustomize/kyaml v0.17.1 // indirect
241+
sigs.k8s.io/kustomize/api v0.18.0 // indirect
242+
sigs.k8s.io/kustomize/kyaml v0.18.1 // indirect
243243
sigs.k8s.io/structured-merge-diff/v4 v4.4.2 // indirect
244244
)

0 commit comments

Comments
 (0)