k8snetworkplumbingwg / whereabouts

A CNI IPAM plugin that assigns IP addresses cluster-wide

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Dependency upgrade and release new version Whereabouts image

tjjh89017 opened this issue · comments

Describe the bug
A clear and concise description of what the bug is.

Some go dependency is out of date.
Do we plan to upgrade the versions of dependencies and avoid some potential security issues?
And release a new version whereabouts image.
Thanks a lot

Expected behavior
A clear and concise description of what you expected to happen.

packages and dependencies are up to date

To Reproduce
Steps to reproduce the behavior:
1.
2.
3.

Environment:

  • Whereabouts version : 0.5.4
  • Kubernetes version (use kubectl version): N/A
  • Network-attachment-definition: N/A
  • Whereabouts configuration (on the host): N/A
  • OS (e.g. from /etc/os-release): N/A
  • Kernel (e.g. uname -a): N/A
  • Others: N/A

Additional info / context
Add any other information / context about the problem here.

out of date

(in master branch, the following dependencies are still out of date)
golang.org/x/net should be 0.0.0-20220906165146-f3363e06e74c or later.
golang.org/x/text should be 0.3.8 or later

Alpine packages
zlib should be 1.2.12-r2 or later