mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-05-25 02:33:36 -04:00
5b478645cd
This PR updates several dependencies addressing security vulnerabilities,
stability fixes, and authentication improvements.
- golang.org/x/crypto: v0.46.0 -> v0.47.0
- Includes latest X509 root certificate bundle updates
- Security hardening for cryptographic operations
- Foundation dependency for TLS and authentication
- github.com/golang-jwt/jwt/v5: v5.2.2 -> v5.3.0
- IMPORTANT: v5.2.2 patched vulnerability GHSA-mh63-6h87-95cp (token
validation security issue) - this update ensures we have the fix
- Adds multiple audience validation support for JWT tokens
- Go 1.21 minimum requirement (code modernization)
- Replaced legacy interface{} with modern any keyword
- golang.org/x/net: v0.48.0 -> v0.49.0
- HTTP/2 priority scheduler improvements (RFC 9218)
- WebSocket security enhancements
- Network layer stability fixes
- go.uber.org/zap: v1.27.0 -> v1.27.1
- Fix: Prevent Object from panicking on nils (PR #1501)
- Fix: Race condition in WithLazy (PR #1511)
- Both fixes improve logging stability in concurrent scenarios
- github.com/godbus/dbus/v5: v5.2.0 -> v5.2.2
- Security: Disabled SHA1 authentication by default on non-Windows
platforms (v5.2.0 change now inherited)
- Performance: Multiple optimizations reducing memory allocations
- Fix: Alignment issues in decoder operations
- Fix: Allow more than 32 containers/struct fields in a signature
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
|
||
|---|---|---|
| .. | ||
| boilerplate | ||
| conformance | ||
| e2e-internal | ||
| gen-swagger-doc | ||
| jenkins | ||
| kube-api-linter | ||
| lib | ||
| make-rules | ||
| testdata | ||
| tools | ||
| verify-flags | ||
| .descriptions_failures | ||
| .import-aliases | ||
| .spelling_failures | ||
| _update-generated-proto-bindings-dockerized.sh | ||
| _update-generated-protobuf-dockerized.sh | ||
| apidiff.sh | ||
| benchmark-go.sh | ||
| build-cross.sh | ||
| build-go.sh | ||
| cherry_pick_pull.sh | ||
| dev-build-and-push.sh | ||
| dev-build-and-up.sh | ||
| dev-push-conformance.sh | ||
| diff-protobuf.sh | ||
| e2e-node-test.sh | ||
| generate-docs.sh | ||
| get-build.sh | ||
| ginkgo-e2e.sh | ||
| golangci-hints.yaml | ||
| golangci.yaml | ||
| golangci.yaml.in | ||
| grab-profiles.sh | ||
| install-etcd.sh | ||
| install-protoc.sh | ||
| lint-dependencies.sh | ||
| local-up-cluster.sh | ||
| logcheck.conf | ||
| module-graph.sh | ||
| OWNERS | ||
| pin-dependency.sh | ||
| print-workspace-status.sh | ||
| README.md | ||
| run-prometheus-on-etcd-scrapes.sh | ||
| serve-prom-scrapes.sh | ||
| test-go.sh | ||
| unwanted-dependencies.json | ||
| update-all.sh | ||
| update-codegen.sh | ||
| update-conformance-yaml.sh | ||
| update-featuregates.sh | ||
| update-generated-api-compatibility-data.sh | ||
| update-generated-docs.sh | ||
| update-generated-stable-metrics.sh | ||
| update-gofmt.sh | ||
| update-golangci-lint-config.sh | ||
| update-import-aliases.sh | ||
| update-internal-modules.sh | ||
| update-kustomize.sh | ||
| update-mocks.sh | ||
| update-netparse-cve.sh | ||
| update-openapi-spec.sh | ||
| update-owners-fmt.sh | ||
| update-translations.sh | ||
| update-vendor-licenses.sh | ||
| update-vendor.sh | ||
| verify-all.sh | ||
| verify-api-groups.sh | ||
| verify-boilerplate.sh | ||
| verify-cli-conventions.sh | ||
| verify-codegen.sh | ||
| verify-conformance-requirements.sh | ||
| verify-conformance-yaml.sh | ||
| verify-deadcode-elimination.sh | ||
| verify-description.sh | ||
| verify-e2e-images.sh | ||
| verify-e2e-test-ownership.sh | ||
| verify-external-dependencies-version.sh | ||
| verify-featuregates.sh | ||
| verify-fieldname-docs.sh | ||
| verify-file-sizes.sh | ||
| verify-flags-underscore.py | ||
| verify-generated-docs.sh | ||
| verify-generated-stable-metrics.sh | ||
| verify-gofmt.sh | ||
| verify-golangci-lint-config.sh | ||
| verify-golangci-lint-pr-hints.sh | ||
| verify-golangci-lint.sh | ||
| verify-govulncheck.sh | ||
| verify-import-aliases.sh | ||
| verify-import-boss.sh | ||
| verify-imports.sh | ||
| verify-internal-modules.sh | ||
| verify-licenses.sh | ||
| verify-mocks.sh | ||
| verify-netparse-cve.sh | ||
| verify-no-vendor-cycles.sh | ||
| verify-non-mutating-validation.sh | ||
| verify-openapi-docs-urls.sh | ||
| verify-openapi-spec.sh | ||
| verify-owners-fmt.sh | ||
| verify-pkg-names.sh | ||
| verify-prerelease-lifecycle-tags.sh | ||
| verify-prometheus-imports.sh | ||
| verify-publishing-bot.sh | ||
| verify-readonly-packages.sh | ||
| verify-shellcheck.sh | ||
| verify-spelling.sh | ||
| verify-staging-meta-files.sh | ||
| verify-test-code.sh | ||
| verify-test-featuregates.sh | ||
| verify-test-images.sh | ||
| verify-testing-import.sh | ||
| verify-typecheck.sh | ||
| verify-vendor-licenses.sh | ||
| verify-vendor.sh | ||
Kubernetes hack GuideLines
This document describes how you can use the scripts from hack directory
and gives a brief introduction and explanation of these scripts.
Overview
The hack directory contains many scripts that ensure continuous development of kubernetes,
enhance the robustness of the code, improve development efficiency, etc.
The explanations and descriptions of these scripts are helpful for contributors.
For details, refer to the following guidelines.
Key scripts
verify-all.sh: This script is a vestigial redirection, Please do not add "real" logic. It is equivalent tomake verify.update-all.sh: This script is a vestigial redirection, Please do not add "real" logic. Thetruetarget of this makerule ishack/make-rules/update.sh.It is equivalent tomake update.
Attention
Note that all scripts must be run from the Kubernetes root directory.
We should run hack/verify-all.sh before submitting a PR and if anything fails run hack/update-all.sh.