1.0.0 updates#206
Conversation
|
@mlbiam: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
Hi @mlbiam. Thanks for your PR. I'm waiting for a jetstack member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/assign @JoshVanL |
Signed-off-by: Kingdon Barrett <kingdon@weave.works>
Support Ingress v1
v1.0.1 merge
Eliminates all 2 critical and 11 high CVEs flagged by Grype against the 1.0.11 image (82 → 63 findings; remaining 63 are Ubuntu base-image only). - Go toolchain 1.26.0 → 1.26.2 (CI + go.mod): clears 15 stdlib CVEs including critical CVE-2026-27143 - pin google.golang.org/grpc to v1.80.0 via replace: clears critical GHSA-p77j-4mvh-x3m3 (CVE-2026-33186, authorization bypass) - github.com/go-jose/go-jose/v4 v4.1.3 → v4.1.4: clears GHSA-78h2-9frx-2jm8 (JWE decryption panic) - pulls go.opentelemetry.io/otel{,/sdk,/metric,/trace} to v1.43.0 via go mod tidy: clears GHSA-mh2q-q3fh-2475 and GHSA-hfvc-g4fc-pqhx Signed-off-by: Mitch Murphy <mitch.murphy@gmail.com>
enhancements:
kubectl --as#3bugs: