218 Commits
Author SHA1 Message Date
Davanum Srinivas 787dd27af4 Bump prometheus/common to v0.73.1
Pulls in github.com/pandatix/go-abnf (OpenMetrics decoder in expfmt),
pinned to v0.5.5 for the long-line decoding fix (prometheus/common#1028).
v0.73.0 is skipped: its go-abnf v0.5.1 requires the blocklisted
hashicorp/go-uuid.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-11-02 16:06:23 -05:00
Dan Winship 4c6d8a38b9 Drop pkg/util/iptables, port to sigs.k8s.io/iptables-wrappers/pkg/iptables (#143065)
* Drop pkg/util/iptables, port to sigs.k8s.io/iptables-wrappers/pkg/iptables

* vendor iptables-wrappers

* update imports

* drop pkg/util/iptables

* update for constructor changes

* update for Restore changes

* update for Monitor changes

* add context args to remaining utiliptables methods

* update for GetChainsFromTable changes
2026-11-02 17:55:51 +00:00
Cici Huang 4ce108bf64 Bump cel-go to v0.33.0 and update dependencies 2026-10-28 18:43:37 +00:00
Davanum Srinivas 28533b6f33 Bump kube-openapi to e2e80c32a35f
Picks up kube-openapi #652 (NYTimes/gziphandler forked in, module dropped) and #644 (go-restful out of pkg/common). gziphandler leaves vendor and joins the blocklist; go-restful leaves the go.mod of twelve published modules.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-10-08 14:17:11 -04:00
Stephen Kitt 0180ae4efd Bump otel to v1.47.0
See
https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.47.0
and
https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.47.0
for details.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-10-07 16:33:41 +02:00
Davanum Srinivas d416589d5f Bump k8s.io/kube-openapi to 2cfbdf149b9a
k8s.io/kube-openapi: v0.0.0-20260927153434-4ef312c1c17d -> v0.0.0-20260929181212-2cfbdf149b9a
github.com/go-openapi/swag and swag/{cmdutils,fileutils,loading,mangling,netutils,stringutils,yamlutils} v0.29.2: vendored -> removed

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-09-29 15:02:37 -04:00
Stephen Kitt 6168af577d Bump to peterbourgon/diskv to v3.0.1
This is now a proper Go module; its dependency on google/btree is thus
apparent in unwanted-dependencies.json.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-09-28 11:56:27 +02:00
kubernetes-prow[bot] e5f62fbfa6 Merge pull request #142012 from everettraven/upstream/deps/go-oidc-jose
update go-jose and go-oidc packages to latest versions
2026-09-14 21:45:19 +00:00
Marek Siarkowicz ab68119cf9 Use model to validate linarizability of storage using porcupine library 2026-09-11 09:13:04 +02:00
Bryce Palmer 0c659b8ecb root: go mod tidy + vendor
Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
2026-09-10 13:34:59 -04:00
Jordan Liggitt cdd9798da9 Bump kube-openapi 2026-09-08 12:38:05 -04:00
Jordan Liggitt c8370e4fad Vendor smd/v7, latest kube-openapi 2026-09-04 13:09:55 -04:00
Jordan Liggitt a724b953db Bump containerd API 1.12.0-rc.0 2026-08-28 14:15:44 -04:00
Antonio Ojea fba8b7408d use latest knftables library
Change-Id: I1a750980e883dbda7188dd231b13bcba6efd1f80
2026-07-22 17:31:13 +00:00
Davanum Srinivas 0706a3bb89 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
Picks up:
- kubernetes/kube-openapi#625: update the go-openapi/swag family to v0.27.1
- kubernetes/kube-openapi#622: propagate nullable field between SMD and OpenAPI schemas

Transitive dependency changes:
- github.com/go-openapi/swag (and submodules) v0.25.4 -> v0.27.1
- github.com/go-openapi/jsonpointer v0.22.4 -> v1.0.0
- github.com/go-openapi/jsonreference v0.21.4 -> v1.0.0
- github.com/go-openapi/swag/jsonname removed (package now provided by jsonpointer)
- github.com/go-openapi/swag/pools added

No changes to hack/unwanted-dependencies.json needed.
2026-07-21 09:56:05 -04:00
Alay Patel 8ba1069dcd kep-5304: use specs-go lib to generate CDI spec
Signed-off-by: Alay Patel <alayp@nvidia.com>
2026-07-14 09:53:06 -04:00
Davanum Srinivas 0e1f1daae1 kubelet: read OOM events in-tree and drop the cadvisor oomparser dependency
The kubelet used cadvisor's lib/utils/oomparser to watch the kernel log for
OOM kills and to produce the container_oom_events_total metric. That made the
kubelet depend on the cadvisor lib module for OOM handling.

This moves OOM handling in-tree:

- The OOM kill parser is forked from cadvisor into
  third_party/forked/cadvisor/oomparser. It reads /dev/kmsg and extracts OOM
  events, adapted to take a context.Context and log through klog.
- The kmsg reader is forked from github.com/euank/go-kmsg-parser into
  third_party/forked/go-kmsg-parser/kmsgparser.
- The kubelet OOM watcher reads OOM events through the forked parser and
  records the container_oom_events_total metric in-tree.
- cadvisor/lib is bumped to v0.60.3, which no longer ships the OOM parser.
  This removes the transitive github.com/euank/go-kmsg-parser
  v2.0.0+incompatible dependency and the vendored cadvisor lib/utils/oomparser
  package.

Behavior is unchanged. OOM events are still emitted and the metric still
reports the same counts.
2026-06-26 20:35:19 -04:00
Davanum Srinivas f451aa0762 kubelet: depend on github.com/google/cadvisor/lib
Migrate the kubelet (and the kube-proxy conntrack helper) off the full github.com/google/cadvisor module onto the lean github.com/google/cadvisor/lib: repoint info/v1+info/v2 type usage to lib/model and the manager/fs/cache/etc. consumers to lib/*; regenerate the cadvisor.Interface mocks; keep the kubelet-pinned cAdvisor global flags via lib/cadvisorflags.

go.mod: require + replace github.com/google/cadvisor/lib (=> the dims/cadvisor/lib fork for now, until lib is tagged) and drop the full github.com/google/cadvisor module entirely; keep github.com/containerd/containerd/api at v1.11.0 (matching upstream master); add github.com/google/cadvisor to unwanted-dependencies.json unwantedModules so the full module cannot be re-vendored.

test/e2e_node: the one remaining consumer of the full module -- the node-e2e ResourceCollector, which used the v2 HTTP client (client/v2) + v2 API types (info/v2) -- now scrapes the standalone cAdvisor pod's /api/v2.1/stats directly over HTTP+JSON, so test/e2e_node depends on no cAdvisor package. No change to the kubelet's stats surfaces.
2026-06-20 17:27:16 -04:00
Jefftree ec84379a64 Bump etcd to v3.7.0-rc.0 and update vendor 2026-06-01 21:37:41 +00:00
Kubernetes Prow Robot e9b95827eb Merge pull request #138573 from dims/update-go-openapi-deps-rebase
Update go-openapi dependencies (jsonpointer, jsonreference, swag)
2026-04-26 05:42:46 +05:30
Benjamin Elder 686a126f69 hack/update-vendor.sh 2026-04-24 19:38:58 -07:00
Davanum Srinivas 693dc57f57 Update go-openapi dependencies (jsonpointer, jsonreference, swag)
Bump go-openapi dependencies to latest versions:
- github.com/go-openapi/jsonpointer v0.21.0 → v0.22.4
- github.com/go-openapi/jsonreference v0.20.2 → v0.21.4
- github.com/go-openapi/swag v0.23.0 → v0.25.4

The new swag version has been restructured into a multi-module monorepo
with submodules (cmdutils, conv, fileutils, jsonname, jsonutils, loading,
mangling, netutils, stringutils, typeutils, yamlutils). As a result:
- mailru/easyjson and josharian/intern are no longer transitive deps
  and have been removed from vendor
- go-openapi/jsonpointer and go-openapi/swag no longer reference
  unwanted deps davecgh/go-spew, mailru/easyjson, or gopkg.in/yaml.v3
- Updated hack/unwanted-dependencies.json accordingly

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-04-24 08:13:31 -04:00
Davanum Srinivas 09fbff5735 Update github.com/google/cel-go v0.26.0 -> v0.27.0
Bump cel-go to v0.27.0 to pick up the fix for context cancellation
error reporting that's breaking CI (see #138334).

Changes worth noting:
- cel-go switched from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3,
  so removed it from the gopkg.in/yaml.v3 unwanted references
- Dropped transitive dep github.com/stoewer/go-strcase
- Updated transitive dep github.com/antlr4-go/antlr/v4
- Pinned cel-go at v0.27.0 in hack/unwanted-dependencies.json

Kubernetes-commit: <drop>
2026-04-13 08:53:35 -04:00
Davanum Srinivas a328ca88ad Use btree from k8s.io/utils instead of github.com/google/btree
The google/btree package is deprecated, so switch to the maintained
fork in k8s.io/utils/third_party/forked/golang/btree.

API differences:
- NewG -> New
- BTreeG[T] -> BTree[T]

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-02-04 16:11:16 -05:00
Davanum Srinivas c40ea60b9f Update OpenTelemetry dependencies to latest versions
Core packages (opentelemetry-go):
- go.opentelemetry.io/otel: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/metric: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/trace: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/sdk: v1.38.0 → v1.39.0

Exporters:
- go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.39.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.39.0

Contrib instrumentation (opentelemetry-go-contrib):
- go.opentelemetry.io/contrib/.../otelhttp: v0.61.0 → v0.64.0
- go.opentelemetry.io/contrib/.../otelrestful: v0.44.0 → v0.64.0

Protocol definitions (opentelemetry-proto-go):
- go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0

Notable changes:
- Go 1.24 is now the minimum required version (Go 1.23 support dropped) for OTEL components
- Performance: ~4x improvement in histogram concurrent operations; xxhash
  replaces fnv for attribute hashing
- Fixed goroutine leak in span processors when context is canceled
- otelrestful migrated semantic conventions from v1.20.0 to v1.34.0
  (e.g., http.method → http.request.method)
- Partial OTLP export errors now surfaced instead of being silently dropped
- otelrestful no longer depends on json-iterator/go, modern-go/concurrent,
  or modern-go/reflect2; unwanted-dependencies.json updated accordingly

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-20 18:24:44 -05:00
carlory 299ec97e6f run hack/update-vendor.sh
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-01-19 11:35:30 +08:00
Davanum Srinivas 5b478645cd Update security and stability dependencies
This PR updates several dependencies addressing security vulnerabilities,
stability fixes, and authentication improvements.

- golang.org/x/crypto: v0.46.0 -> v0.47.0
  - Includes latest X509 root certificate bundle updates
  - Security hardening for cryptographic operations
  - Foundation dependency for TLS and authentication

- github.com/golang-jwt/jwt/v5: v5.2.2 -> v5.3.0
  - IMPORTANT: v5.2.2 patched vulnerability GHSA-mh63-6h87-95cp (token
    validation security issue) - this update ensures we have the fix
  - Adds multiple audience validation support for JWT tokens
  - Go 1.21 minimum requirement (code modernization)
  - Replaced legacy interface{} with modern any keyword

- golang.org/x/net: v0.48.0 -> v0.49.0
  - HTTP/2 priority scheduler improvements (RFC 9218)
  - WebSocket security enhancements
  - Network layer stability fixes

- go.uber.org/zap: v1.27.0 -> v1.27.1
  - Fix: Prevent Object from panicking on nils (PR #1501)
  - Fix: Race condition in WithLazy (PR #1511)
  - Both fixes improve logging stability in concurrent scenarios

- github.com/godbus/dbus/v5: v5.2.0 -> v5.2.2
  - Security: Disabled SHA1 authentication by default on non-Windows
    platforms (v5.2.0 change now inherited)
  - Performance: Multiple optimizations reducing memory allocations
  - Fix: Alignment issues in decoder operations
  - Fix: Allow more than 32 containers/struct fields in a signature

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-15 19:57:11 -05:00
Davanum Srinivas 95cf1f264d Update to github.com/google/cadvisor v0.55.1
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-21 08:13:06 -05:00
Davanum Srinivas 60cce0abd0 updated to last known good dependencies for otelgrpc and dbus
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-20 15:32:11 -05:00
Kubernetes Prow Robot 0ea3824860 Merge pull request #135845 from skitt/drop-armon-circbuf
Replace armon/circbuf with k8s.io/utils/buffer
2025-12-19 07:40:37 -08:00
Stephen Kitt 3653ae2b9a Replace armon/circbuf with k8s.io/utils/buffer
This uses the new generic fixed ring implementation in k8s.io/utils.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2025-12-19 09:59:41 +01:00
Ciprian Hacman aa5b4e0f78 hack/update-vendor.sh 2025-12-18 18:15:15 +02:00
Davanum Srinivas ab1ffaf12e move httpcache to third_party/forked
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-18 08:18:57 -05:00
Kubernetes Prow Robot 5eecce635d Merge pull request #135748 from princepereira/ppereira-vendoring-hnslib-v012
Update vendored hnslib to v0.1.2
2025-12-18 02:10:30 -08:00
Prince Pereira 832e342c01 Update vendored hnslib to v0.1.2 2025-12-16 12:50:35 +00:00
Davanum Srinivas 1240604ebf Drop usages of archived dependency - github.com/grpc-ecosystem/go-grpc-prometheus
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-01 20:53:55 -05:00
Benjamin Elder 1ce140d105 update github.com/opencontainers/selinux to v1.13.0 2025-11-12 14:46:31 +00:00
Patrick Ohly 6034321603 dependencies: ginkgo v2.27.2, gomega v1.38.2
Specifically the new AddTreeConstructionNodeArgsTransformer and SpecPriority in
Ginkgo will be useful.

Gomega gets updated to keep up-to-date.
2025-11-01 09:52:09 +01:00
koba1t ee8ef383be Update kubectl kustomize to kyaml/v0.20.1, cmd/config/v0.20.1, api/v0.20.1, kustomize/v5.7.1 2025-07-23 22:37:19 +09:00
Davanum Srinivas ebc1ccc491 Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-07-14 07:24:48 -04:00
Davanum Srinivas 3827d3bc4f Drop usage of forked copies of goyaml.v2 and goyaml.v3
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-06-17 11:00:27 -04:00
Jordan Liggitt cf0bbf1171 bump etcd client to 3.6
hack/pin-dependency.sh go.etcd.io/etcd/api/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/client/pkg/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/client/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/pkg/v3 v3.6.0
hack/pin-dependency.sh go.etcd.io/etcd/server/v3 v3.6.0

hack/pin-dependency.sh github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0

hack/update-vendor.sh
2025-05-15 21:19:11 -04:00
Tim Hockin 0ce4268b1f Vendor randfill 2025-03-08 15:21:58 -08:00
Davanum Srinivas 97a54dc4b0 update to v1.22.0-rc.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-07 13:45:34 -05:00
Davanum Srinivas 5ecddb6571 update to latest cadvisor @ v0.52.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-05 06:36:39 -05:00
David Ashpole 29c219dceb update go.opentelemetry.io dependencies to v1.33.0/v0.58.0 2025-03-01 19:18:34 +00:00
Davanum Srinivas faf30b3067 update github.com/coreos/go-oidc to v2.3.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-01-22 15:27:54 -05:00
Davanum Srinivas c9e81cd84c Switch to gopkg.in/go-jose/go-jose.v2 @ v2.6.3
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-01-21 09:21:27 -05:00
Davanum Srinivas 43d86c2a3e Drop github.com/asaskevich/govalidator
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-01-14 15:53:49 -05:00
Jefftree 3269f4bb94 bump kube-openapi 2024-12-13 20:50:49 +00:00