Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump dependencies #58

Merged
merged 1 commit into from
Dec 4, 2024
Merged

Bump dependencies #58

merged 1 commit into from
Dec 4, 2024

Conversation

abaguas
Copy link
Contributor

@abaguas abaguas commented Dec 3, 2024

The plugin was not refreshed for the past 2 years. In this PR we bump the dependencies to mitigate vulnerabilities.

  • Bumped go to v1.23.3 and all go libraries using go get -u ./....
  • Bumped and pinned all Github action version to the latest. A PR introducing Renovate will follow.
  • Bumped the coredns helm chart to the latest version.
  • .golangci config converted from toml to yaml

The only code change is the introduction of the roundRobinShuffle function as a replacement for the deprecated RoundRobinResponseWriter. The outcome is the exact same, a response a list of IP addresses in random order.

Signed-off-by: Andre Aguas <[email protected]>
@abaguas abaguas merged commit 599c35b into main Dec 4, 2024
9 checks passed
@abaguas abaguas deleted the refresh/plugin branch December 4, 2024 21:02
abaguas added a commit to abaguas/k8gb that referenced this pull request Dec 9, 2024
There is a new release of the coredns image where all dependencies were updated: k8gb-io/coredns-crd-plugin#58, k8gb-io/coredns-crd-plugin#60

This fixes multiple vulnerabilities

Signed-off-by: Andre Aguas <[email protected]>
ytsarev pushed a commit to k8gb-io/k8gb that referenced this pull request Dec 9, 2024
There is a new release of the coredns image where all dependencies were updated: k8gb-io/coredns-crd-plugin#58, k8gb-io/coredns-crd-plugin#60

This fixes multiple vulnerabilities

Signed-off-by: Andre Aguas <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants