1455 Commits

Author SHA1 Message Date
andyzhangx
7fddd23ffd test: fix stdlib error in trivy gh action 2024-06-05 13:34:05 +00:00
andyzhangx
9dbb67f966 Squashed 'release-tools/' changes from b54c1ba4..f40f0ccd
f40f0ccd Merge pull request #256 from solumath/master
cfa92106 Instruction update
379a1bb9 Merge pull request #255 from humblec/sidecar-md
a5667bbb fix typo in sidecar release process
49676850 Merge pull request #254 from bells17/add-github-actions
d9bd160c Update skip list in codespell GitHub Action
adb3af9d Merge pull request #252 from bells17/update-go-version
f5aebfc9 Add GitHub Actions workflows
b82ee388 Merge pull request #253 from bells17/fix-typo
c3174562 Fix typo
0a785056 Bump to Go 1.22.3
edd89ad5 Merge pull request #251 from jsafrane/add-logcheck
043fd099 Add test-logcheck target
d7535ae0 Merge pull request #250 from jsafrane/go-1.22
b52e7ad3 Update go to 1.22.2
14fdb6f6 Merge pull request #247 from msau42/prow
dc4d0ae2 Merge pull request #249 from jsafrane/use-go-version
e681b170 Use .go-version to get Kubernetes go version
9b4352e9 Update release playbook
c7bb972c Fix release notes script to use fixed tags
463a0e9f Add script to update specific go modules

git-subtree-dir: release-tools
git-subtree-split: f40f0ccd458f2d4555e3ca98d69b5a984bae0f14
2024-06-05 13:28:36 +00:00
andyzhangx
9d5d06524c Merge commit '9dbb67f9660ce0305d5d65db9acd25456a76e334' into fix-spelling 2024-06-05 13:28:36 +00:00
Kubernetes Prow Robot
d5d834588f
Merge pull request #677 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.18.0
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.18.0
2024-05-21 18:42:20 -07:00
dependabot[bot]
0c45ccfb18
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-21 22:51:09 +00:00
Kubernetes Prow Robot
8276121306
Merge pull request #676 from kubernetes-csi/dependabot/go_modules/k8s.io/client-go-0.28.10
chore(deps): bump k8s.io/client-go from 0.28.9 to 0.28.10
2024-05-20 17:57:51 -07:00
dependabot[bot]
6bb56dc829
---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-20 22:13:25 +00:00
Kubernetes Prow Robot
42108f2401
Merge pull request #675 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.64.0
chore(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0
2024-05-20 07:01:05 -07:00
dependabot[bot]
202e290fe8
chore(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.63.2 to 1.64.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.63.2...v1.64.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-15 22:57:46 +00:00
Andy Zhang
c8ad39f37b
Merge pull request #673 from andyzhangx/remove-stale-archive
fix: remove stale archived volume copy before rename
2024-05-11 19:24:21 +08:00
andyzhangx
1f40750905 fix: remove stale archived volume copy before Rename 2024-05-11 03:51:25 +00:00
Kubernetes Prow Robot
b6b606e48e
Merge pull request #672 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.3
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3
2024-05-09 19:02:43 -07:00
dependabot[bot]
aab0f49e8f
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.2 to 2.17.3.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.2...v2.17.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-09 22:21:49 +00:00
Kubernetes Prow Robot
277e235e0b
Merge pull request #669 from efficacy38/master
fix: wrong chart intent when using multiple mountOptions
2024-05-09 04:15:58 -07:00
efficacy38
9402817430 fix: wrong chart intent when using multiple mountOptions 2024-05-09 13:16:28 +08:00
Andy Zhang
8671e7871a
Merge pull request #671 from andyzhangx/fix-sdlib
test: fix stdlib CVE due to golang v1.22.2
2024-05-09 12:07:33 +08:00
Andy Zhang
841199844a
Merge pull request #670 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.25.0
chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
2024-05-09 11:19:27 +08:00
andyzhangx
9b5c97c165 test: fix stdlib CVE due to golang v1.22.2
fix

fix
2024-05-09 03:12:28 +00:00
dependabot[bot]
d61f157183
chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.24.0 to 0.25.0.
- [Commits](https://github.com/golang/net/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-08 22:53:05 +00:00
Kubernetes Prow Robot
316f2d8c29
Merge pull request #667 from kubernetes-csi/dependabot/go_modules/google.golang.org/protobuf-1.34.1
chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1
2024-05-07 19:43:52 -07:00
Kubernetes Prow Robot
ae75bbcc98
Merge pull request #666 from kubernetes-csi/dependabot/github_actions/golangci/golangci-lint-action-6
chore(deps): bump golangci/golangci-lint-action from 5 to 6
2024-05-07 18:51:22 -07:00
dependabot[bot]
cebbec15fa
chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1
Bumps google.golang.org/protobuf from 1.34.0 to 1.34.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 23:01:05 +00:00
dependabot[bot]
3794ff4ac5
chore(deps): bump golangci/golangci-lint-action from 5 to 6
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 5 to 6.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 22:09:37 +00:00
Kubernetes Prow Robot
9a90be7e19
Merge pull request #665 from kubernetes-csi/dependabot/go_modules/github.com/onsi/gomega-1.33.1
chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
2024-05-07 03:28:16 -07:00
dependabot[bot]
ca75938cfb
chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.0 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.33.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 22:34:07 +00:00
Andy Zhang
7f55f5caeb
Merge pull request #662 from andyzhangx/cut-v4.7.0
doc: cut v4.7.0 release
2024-05-06 17:59:42 +08:00
andyzhangx
8c2de2738d doc: use latest version for master branch 2024-05-04 07:52:16 +00:00
andyzhangx
d774c858aa doc: cut v4.7.0 release 2024-05-04 07:51:30 +00:00
Kubernetes Prow Robot
c3ef62f4b6
Merge pull request #660 from kubernetes-csi/dependabot/go_modules/google.golang.org/protobuf-1.34.0
chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0
2024-05-01 17:22:46 -07:00
dependabot[bot]
68567c88d9
chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0
Bumps google.golang.org/protobuf from 1.33.0 to 1.34.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-01 22:26:09 +00:00
Kubernetes Prow Robot
f944e68414
Merge pull request #658 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.2
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
2024-04-29 18:03:27 -07:00
dependabot[bot]
2030767c66
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.1 to 2.17.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.1...v2.17.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 22:29:45 +00:00
Andy Zhang
074adba405
Merge pull request #656 from kubernetes-csi/dependabot/github_actions/golangci/golangci-lint-action-5
chore(deps): bump golangci/golangci-lint-action from 4 to 5
2024-04-26 08:38:52 +08:00
Andy Zhang
2fff720e6d
Merge pull request #655 from andyzhangx/CVE-2024-3177
fix: CVE-2024-3177
2024-04-26 08:35:05 +08:00
dependabot[bot]
15e5128ea2
chore(deps): bump golangci/golangci-lint-action from 4 to 5
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 4 to 5.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-25 22:48:23 +00:00
andyzhangx
dc266aa0ef test: ignore incorrect CVE-2020-8559 report error 2024-04-25 15:05:15 +00:00
andyzhangx
b1fec8d160 fix: CVE-2024-3177
fix
2024-04-25 15:05:11 +00:00
Kubernetes Prow Robot
f929432461
Merge pull request #645 from ttryf/feature-add-storageclass-to-helm-chart
feat: add StorageClass definition in Helm charts
2024-04-20 23:37:18 -07:00
Thanos Tryfonidis
52b0190d9b
feat: add StorageClass definition in Helm charts 2024-04-19 23:32:48 +03:00
Kubernetes Prow Robot
202111749c
Merge pull request #650 from kubernetes-csi/dependabot/go_modules/k8s.io/mount-utils-0.29.4
chore(deps): bump k8s.io/mount-utils from 0.29.3 to 0.29.4
2024-04-17 19:20:38 -07:00
dependabot[bot]
05ca4c6c70
chore(deps): bump k8s.io/mount-utils from 0.29.3 to 0.29.4
Bumps [k8s.io/mount-utils](https://github.com/kubernetes/mount-utils) from 0.29.3 to 0.29.4.
- [Commits](https://github.com/kubernetes/mount-utils/compare/v0.29.3...v0.29.4)

---
updated-dependencies:
- dependency-name: k8s.io/mount-utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-17 22:12:19 +00:00
Kubernetes Prow Robot
5733aea8a9
Merge pull request #646 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.63.2
chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2
2024-04-09 04:25:13 -07:00
dependabot[bot]
c5143a7675
chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.63.0 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.63.0...v1.63.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 22:37:25 +00:00
Kubernetes Prow Robot
a94a6605e0
Merge pull request #644 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.63.0
chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0
2024-04-05 18:38:30 -07:00
dependabot[bot]
eb0bc50a48
chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-05 22:49:46 +00:00
Kubernetes Prow Robot
719b48c4da
Merge pull request #643 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.24.0
chore(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
2024-04-04 18:20:45 -07:00
dependabot[bot]
b2a76fe769
chore(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.24.0.
- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-04 22:37:16 +00:00
Kubernetes Prow Robot
856d7f3427
Merge pull request #642 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.23.0
chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
2024-04-04 07:01:01 -07:00
dependabot[bot]
c23b34333e
chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-03 22:44:32 +00:00
Andy Zhang
57d8b1e66c
Merge pull request #641 from andyzhangx/use-http-endpoint
feat: use new restricted liveness probe endpoint on v4.6.0
2024-04-02 15:08:00 +08:00