1389 Commits

Author SHA1 Message Date
Andy Zhang
841199844a
Merge pull request #670 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.25.0
chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
2024-05-09 11:19:27 +08:00
andyzhangx
9b5c97c165 test: fix stdlib CVE due to golang v1.22.2
fix

fix
2024-05-09 03:12:28 +00:00
dependabot[bot]
d61f157183
chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.24.0 to 0.25.0.
- [Commits](https://github.com/golang/net/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-08 22:53:05 +00:00
Kubernetes Prow Robot
316f2d8c29
Merge pull request #667 from kubernetes-csi/dependabot/go_modules/google.golang.org/protobuf-1.34.1
chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1
2024-05-07 19:43:52 -07:00
Kubernetes Prow Robot
ae75bbcc98
Merge pull request #666 from kubernetes-csi/dependabot/github_actions/golangci/golangci-lint-action-6
chore(deps): bump golangci/golangci-lint-action from 5 to 6
2024-05-07 18:51:22 -07:00
dependabot[bot]
cebbec15fa
chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1
Bumps google.golang.org/protobuf from 1.34.0 to 1.34.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 23:01:05 +00:00
dependabot[bot]
3794ff4ac5
chore(deps): bump golangci/golangci-lint-action from 5 to 6
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 5 to 6.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-07 22:09:37 +00:00
Kubernetes Prow Robot
9a90be7e19
Merge pull request #665 from kubernetes-csi/dependabot/go_modules/github.com/onsi/gomega-1.33.1
chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
2024-05-07 03:28:16 -07:00
dependabot[bot]
ca75938cfb
chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.0 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.33.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 22:34:07 +00:00
Andy Zhang
7f55f5caeb
Merge pull request #662 from andyzhangx/cut-v4.7.0
doc: cut v4.7.0 release
2024-05-06 17:59:42 +08:00
andyzhangx
8c2de2738d doc: use latest version for master branch 2024-05-04 07:52:16 +00:00
andyzhangx
d774c858aa doc: cut v4.7.0 release 2024-05-04 07:51:30 +00:00
Kubernetes Prow Robot
c3ef62f4b6
Merge pull request #660 from kubernetes-csi/dependabot/go_modules/google.golang.org/protobuf-1.34.0
chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0
2024-05-01 17:22:46 -07:00
dependabot[bot]
68567c88d9
chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0
Bumps google.golang.org/protobuf from 1.33.0 to 1.34.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-01 22:26:09 +00:00
Kubernetes Prow Robot
f944e68414
Merge pull request #658 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.2
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
2024-04-29 18:03:27 -07:00
dependabot[bot]
2030767c66
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.1 to 2.17.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.1...v2.17.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 22:29:45 +00:00
Andy Zhang
074adba405
Merge pull request #656 from kubernetes-csi/dependabot/github_actions/golangci/golangci-lint-action-5
chore(deps): bump golangci/golangci-lint-action from 4 to 5
2024-04-26 08:38:52 +08:00
Andy Zhang
2fff720e6d
Merge pull request #655 from andyzhangx/CVE-2024-3177
fix: CVE-2024-3177
2024-04-26 08:35:05 +08:00
dependabot[bot]
15e5128ea2
chore(deps): bump golangci/golangci-lint-action from 4 to 5
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 4 to 5.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-25 22:48:23 +00:00
andyzhangx
dc266aa0ef test: ignore incorrect CVE-2020-8559 report error 2024-04-25 15:05:15 +00:00
andyzhangx
b1fec8d160 fix: CVE-2024-3177
fix
2024-04-25 15:05:11 +00:00
Kubernetes Prow Robot
f929432461
Merge pull request #645 from ttryf/feature-add-storageclass-to-helm-chart
feat: add StorageClass definition in Helm charts
2024-04-20 23:37:18 -07:00
Thanos Tryfonidis
52b0190d9b
feat: add StorageClass definition in Helm charts 2024-04-19 23:32:48 +03:00
Kubernetes Prow Robot
202111749c
Merge pull request #650 from kubernetes-csi/dependabot/go_modules/k8s.io/mount-utils-0.29.4
chore(deps): bump k8s.io/mount-utils from 0.29.3 to 0.29.4
2024-04-17 19:20:38 -07:00
dependabot[bot]
05ca4c6c70
chore(deps): bump k8s.io/mount-utils from 0.29.3 to 0.29.4
Bumps [k8s.io/mount-utils](https://github.com/kubernetes/mount-utils) from 0.29.3 to 0.29.4.
- [Commits](https://github.com/kubernetes/mount-utils/compare/v0.29.3...v0.29.4)

---
updated-dependencies:
- dependency-name: k8s.io/mount-utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-17 22:12:19 +00:00
Kubernetes Prow Robot
5733aea8a9
Merge pull request #646 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.63.2
chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2
2024-04-09 04:25:13 -07:00
dependabot[bot]
c5143a7675
chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.63.0 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.63.0...v1.63.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 22:37:25 +00:00
Kubernetes Prow Robot
a94a6605e0
Merge pull request #644 from kubernetes-csi/dependabot/go_modules/google.golang.org/grpc-1.63.0
chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0
2024-04-05 18:38:30 -07:00
dependabot[bot]
eb0bc50a48
chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-05 22:49:46 +00:00
Kubernetes Prow Robot
719b48c4da
Merge pull request #643 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.24.0
chore(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
2024-04-04 18:20:45 -07:00
dependabot[bot]
b2a76fe769
chore(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.24.0.
- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-04 22:37:16 +00:00
Kubernetes Prow Robot
856d7f3427
Merge pull request #642 from kubernetes-csi/dependabot/go_modules/golang.org/x/net-0.23.0
chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
2024-04-04 07:01:01 -07:00
dependabot[bot]
c23b34333e
chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-03 22:44:32 +00:00
Andy Zhang
57d8b1e66c
Merge pull request #641 from andyzhangx/use-http-endpoint
feat: use new restricted liveness probe endpoint on v4.6.0
2024-04-02 15:08:00 +08:00
andyzhangx
048b943188 feat: use new restricted liveness probe endpoint on kubectl install 2024-04-01 07:23:12 +00:00
andyzhangx
a8a69e6c82 cleanup: remove livenessProbe.host chart field 2024-04-01 02:40:46 +00:00
andyzhangx
330aaba137 feat: use new restricted liveness probe endpoint on v4.6.0
fix
2024-04-01 02:37:38 +00:00
Kubernetes Prow Robot
deced01b5d
Merge pull request #639 from anothertobi/liveness
feat: use new restricted liveness probe endpoint
2024-03-28 19:57:50 -07:00
Tobi Nehrlich
0920a991f9
Use new restricted liveness probe endpoint
The `--health-port` option is deprecated and `--http-endpoint` the new
option to use. Since `--http-endpoint` additionally exposes metrics, the
liveness probe is limited to only listen on localhost by default. With
this only processes on the host network, like kubelet, can call the
endpoint. Regular pods can no longer access the liveness probe via the
node IP address.

Signed-off-by: Tobi Nehrlich <tobi.nehrlich@amazee.io>
2024-03-28 13:17:40 +01:00
Andy Zhang
0a235fb0f0
Merge pull request #638 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.1
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1
2024-03-26 20:24:19 +08:00
Andy Zhang
1f626a40d7
Merge pull request #637 from andyzhangx/add-baserepo
feat: add baseRepo field in helm charts
2024-03-26 15:51:51 +08:00
dependabot[bot]
742bc135da
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.0 to 2.17.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.0...v2.17.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 23:01:45 +00:00
andyzhangx
fadfc7346b feat: add baseRepo filed in helm charts
fix
2024-03-25 13:50:35 +00:00
Kubernetes Prow Robot
44829889fc
Merge pull request #636 from kubernetes-csi/dependabot/go_modules/k8s.io/mount-utils-0.29.3
chore(deps): bump k8s.io/mount-utils from 0.29.2 to 0.29.3
2024-03-22 18:50:54 -07:00
dependabot[bot]
a5b7db6572
chore(deps): bump k8s.io/mount-utils from 0.29.2 to 0.29.3
Bumps [k8s.io/mount-utils](https://github.com/kubernetes/mount-utils) from 0.29.2 to 0.29.3.
- [Commits](https://github.com/kubernetes/mount-utils/compare/v0.29.2...v0.29.3)

---
updated-dependencies:
- dependency-name: k8s.io/mount-utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-22 22:10:35 +00:00
Kubernetes Prow Robot
75edbf2ee7
Merge pull request #634 from kubernetes-csi/dependabot/go_modules/github.com/onsi/gomega-1.32.0
chore(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
2024-03-21 19:32:22 -07:00
dependabot[bot]
6cdfd8d08a
chore(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.1 to 1.32.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.31.1...v1.32.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-21 22:07:42 +00:00
Kubernetes Prow Robot
b1cf7f1836
Merge pull request #633 from kubernetes-csi/dependabot/go_modules/k8s.io/client-go-0.28.8
chore(deps): bump k8s.io/client-go from 0.28.7 to 0.28.8
2024-03-20 20:18:59 -07:00
dependabot[bot]
acf4c80bbd
chore(deps): bump k8s.io/client-go from 0.28.7 to 0.28.8
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.28.7 to 0.28.8.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.7...v0.28.8)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-20 22:10:31 +00:00
Kubernetes Prow Robot
e99853d158
Merge pull request #632 from kubernetes-csi/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.0
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0
2024-03-19 18:46:48 -07:00