Pulls in github.com/pandatix/go-abnf (OpenMetrics decoder in expfmt),
pinned to v0.5.5 for the long-line decoding fix (prometheus/common#1028).
v0.73.0 is skipped: its go-abnf v0.5.1 requires the blocklisted
hashicorp/go-uuid.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
* Drop pkg/util/iptables, port to sigs.k8s.io/iptables-wrappers/pkg/iptables
* vendor iptables-wrappers
* update imports
* drop pkg/util/iptables
* update for constructor changes
* update for Restore changes
* update for Monitor changes
* add context args to remaining utiliptables methods
* update for GetChainsFromTable changes
v4.1.5 is vulnerable to a denial of service when parsing crafted JWKs.
v4.1.7 also fixes GHSA-r39w-98wm-9pp6, GHSA-27pc-rm86-68pq,
GHSA-p9j4-2j95-j4rv, GHSA-v6h2-qj3f-2h6v and GHSA-c67m-wr4h-2ccg.
Generated with hack/pin-dependency.sh and hack/update-vendor.sh.
Signed-off-by: 0xkatana <H3xKatana@users.noreply.github.com>
v0.33.1 cherry-picks the StrictTimestampParsing option (cel-go #1587),
which restores the timestamp parsing of earlier releases, and a fix for
well-known type values used as qualifiers (cel-go #1588).
Rebased onto current master and re-vendored as requested.
The RC was validated in this PR earlier with no issues found.
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
Pulls in emicklei/go-restful#599 (released in v3.14.0), which caches compiled *regexp.Regexp instances in newPathExpression and embeds ParameterData by value inside Parameter, reducing kube-apiserver retained heap by -3.54 MB (-15,000 live heap objects).
Picks up kube-openapi #652 (NYTimes/gziphandler forked in, module dropped) and #644 (go-restful out of pkg/common). gziphandler leaves vendor and joins the blocklist; go-restful leaves the go.mod of twelve published modules.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
This allows v1.41.0 to be dropped from the tree entirely. v1.37.0 is
still present because otel references it for backwards-compatibility;
v1.40.0 is still present for etcd.
Signed-off-by: Stephen Kitt <skitt@redhat.com>
jsonpointer v1.0.2 fixes two uncaught panics in the name provider and
in Pointer.Set (GHSA-cqr7-r6x2-9cqf, GHSA-m8w9-vj7g-gxgg).
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Picks up kubernetes/kube-openapi#641 (testify v1.12.1; go-spew,
go-difflib and gopkg.in/yaml.v3 leave its go.mod, so kube-openapi
drops out of both referencer lists in hack/unwanted-dependencies.json)
and #639, which reads +k8s:optional and +k8s:required as aliases of
+optional and +required.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
This is now a proper Go module; its dependency on google/btree is thus
apparent in unwanted-dependencies.json.
Signed-off-by: Stephen Kitt <skitt@redhat.com>
Matcher fixes only: BeNumerically compares signed and unsigned
integers by value and honours the float threshold, HaveKeyWithValue
no longer depends on map iteration order, MatchJSON compares integers
beyond 2^53 exactly, MatchYAML compares every document in a stream.
Test-only dependency.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
caddy v1.1.2 to v1.1.4 guard the Corefile parser against snippet
import cycles, unbounded expansion, an EOF loop in NextBlock and
nested-block errors. kubeadm parses the CoreDNS ConfigMap with it
through corefile-migration, which still floors caddy at v1.1.1.
gettext-go v1.0.3 fixes .po parsing of \r and a plural formula in
kubectl's i18n loader.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
All three were held back by the grpc pin. otlptracegrpc v1.46.0 needs
grpc-gateway v2.30.0, which stays pinned. Five otel modules leave the
go-spew and yaml.v3 unwanted-reference lists.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
v1.82.2 lacks the CVE-2026-84304 fix (grpc/grpc-go#9331, in v1.83.1+).
The four modules v1.83+ adds via cloud.google.com/go/auth are graph-only
(only credentials/google imports them, not vendored); record them in
status.unwantedReferences, option 1 of #142005.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
v1.2.10 drops the deprecated github.com/golang/protobuf requirement
(containerd/ttrpc#248) and github.com/prometheus/procfs (#249). ttrpc
leaves status.unwantedReferences for github.com/golang/protobuf, whose
remaining referencers are grpc, the etcd modules, protobuf-go and
go-grpc-middleware.
Bryce Palmer