Commit Graph

704 Commits

Author SHA1 Message Date
tomsweeneyredhat f905965162 [release-1.35] CVE-2024-3727 updates
Bump c/image to v5.30.1 and c/common to v0.58.3 to addresses:

CVE-2024-3727
https://issues.redhat.com/browse/RHEL-35438
https://issues.redhat.com/browse/RHEL-35441

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-05-09 16:30:45 -04:00
tomsweeneyredhat 820caaf31c [release-1.35] Bump go-jose CVE-2024-28180
This is the second PR to fix this CVE.  In one of the Skopeo
PR's, @mtrmac pointed out that was a second go-jose module,
gopkg.in/go-jose/go-jose which also had to be bumped.  This does that.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-04-18 14:10:28 -04:00
tomsweeneyredhat c7296dd352 [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180
Bump go-jose to v3.0.3 to address CVE-2024-28180

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-04-10 17:55:48 -04:00
Paul Holzinger f32167844b [release-1.35] correctly configure /etc/hosts and resolv.conf
... when using network

Previously buildah may have created a incorrect hosts/resolv.conf file,
when netavark, slirp4netns or pasta are used we have to actually
consider their special setup and use the correct nameservers.

[NO NEW TESTS NEEDED]

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-29 13:37:02 -04:00
tomsweeneyredhat 3336f1e9fc [release-1.35] Bump c/common to v0.58.1
As the title says.  Bumping in prep of Podman v5.0.1

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-28 14:24:31 -04:00
tomsweeneyredhat ec5af8b175 [release-1.35] CVE-2024-24786 protobuf to 1.33
As the title says, bumping for CVE-2024-24786

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-22 11:44:40 -04:00
tomsweeneyredhat 3164076e2d Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
As the title says.  Bump:

c/common  v0.58.0
c/image   v5.30.0
c/storage v1.53.0

In preparation for Podman v5.0

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-06 23:47:35 -05:00
openshift-merge-bot[bot] 0e0676d854
Merge pull request #5367 from rhatdan/VENDOR
Update vendor of containers/common
2024-03-01 19:02:16 +00:00
renovate[bot] e504df1889
fix(deps): update module github.com/stretchr/testify to v1.9.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-01 16:17:34 +00:00
Daniel J Walsh bbea3eb544
Update vendor of containers/(common,image)
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-03-01 09:45:50 -05:00
Daniel J Walsh d6e2dd76c4
Merge pull request #5369 from containers/renovate/github.com-containers-luksy-digest
fix(deps): update github.com/containers/luksy digest to ceb12d4
2024-03-01 04:50:59 -05:00
renovate[bot] 6474279ed2
fix(deps): update github.com/containers/storage digest to eadc620
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-01 09:48:09 +00:00
renovate[bot] f9d6036080
fix(deps): update github.com/containers/luksy digest to ceb12d4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-01 09:47:57 +00:00
renovate[bot] 53f230e2b4
fix(deps): update github.com/containers/image/v5 digest to cdc6802
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-01 02:45:15 +00:00
Daniel J Walsh e9c3c1666c
Vendor in containers/(storage,image,common)
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-02-28 09:44:33 -05:00
renovate[bot] 5047a35669
Update module golang.org/x/crypto to v0.20.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-27 18:16:39 +00:00
renovate[bot] 5748595ae7
Update module go.etcd.io/bbolt to v1.3.9
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-24 19:37:57 +00:00
renovate[bot] aee02318ab
Update module github.com/opencontainers/image-spec to v1.1.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-21 14:00:45 +00:00
Daniel J Walsh 90c0d97941
Vendor in latest containers/(storage,image,common)
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-02-08 06:43:21 -05:00
Nalin Dahyabhai 4f0b619dd2 Use golang.org/x/exp/slices.Contains
... instead of github.com/containers/common/pkg/util.StringInSlice,
per linters.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2024-02-07 11:50:41 -05:00
Nalin Dahyabhai 5d58b88c7d Update github.com/openshift/imagebuilder and containers/common
Update github.com/openshift/imagebuilder to the v1.2.6 release
Update github.com/containers/common to the current tip of the main branch

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2024-02-07 11:47:28 -05:00
renovate[bot] 9d58d13829
fix(deps): update module github.com/containerd/containerd to v1.7.13
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-02 21:21:05 +00:00
renovate[bot] 1a8cbc1851
fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-02 06:32:42 +00:00
Daniel J Walsh b850c711ff
Merge pull request #5309 from containers/renovate/go-github.com/opencontainers/runc-vulnerability
fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
2024-02-01 07:42:21 -05:00
renovate[bot] e14f46f2e3
fix(deps): update github.com/containers/luksy digest to b62d551
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-01 12:40:45 +00:00
renovate[bot] a7aec19412
fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-01 12:40:34 +00:00
renovate[bot] f1f0d9d4d8
fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 23:02:26 +00:00
Daniel J Walsh adbbbd3fbb
Merge pull request #5278 from containers/renovate/github.com-onsi-gomega-1.x
fix(deps): update module github.com/onsi/gomega to v1.31.1
2024-01-23 10:18:33 -05:00
renovate[bot] f6f6da8f02
fix(deps): update module github.com/onsi/gomega to v1.31.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-23 15:09:04 +00:00
renovate[bot] 4b5caebd79
fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-23 15:08:11 +00:00
renovate[bot] dd186ee0f7
fix(deps): update module golang.org/x/crypto to v0.18.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-08 19:47:28 +00:00
renovate[bot] 905551f513
fix(deps): update module golang.org/x/sync to v0.6.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-05 12:15:09 +00:00
renovate[bot] efe76552b5
fix(deps): update module golang.org/x/term to v0.16.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-04 23:07:37 +00:00
renovate[bot] b5ee4fb34d
fix(deps): update github.com/containers/storage digest to ef81e9b
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-02 12:09:30 +00:00
renovate[bot] 114bb6f0c9
fix(deps): update github.com/containers/image/v5 digest to 1b221d4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-01 01:28:06 +00:00
renovate[bot] fd0899f1f1
fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-20 15:45:01 +00:00
renovate[bot] b2c80f9a3f
fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-19 01:41:20 +00:00
renovate[bot] 2ab21c6666
fix(deps): update module github.com/containernetworking/plugins to v1.4.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-13 11:17:14 +00:00
renovate[bot] 29d945f38b
fix(deps): update github.com/containers/image/v5 digest to 7a40fee
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-13 00:56:26 +00:00
renovate[bot] 6977c91e2b
fix(deps): update module github.com/containerd/containerd to v1.7.11
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-09 02:06:04 +00:00
Daniel J Walsh 042b0a2d88
Merge pull request #5207 from containers/renovate/github.com-containers-storage-digest
fix(deps): update github.com/containers/storage digest to 15c3cb7
2023-12-03 21:00:34 -05:00
renovate[bot] b9852af085
fix(deps): update github.com/containers/storage digest to 15c3cb7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-04 01:59:48 +00:00
renovate[bot] ad90fba16d
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 16:59:42 +00:00
renovate[bot] 669f19f6c0
fix(deps): update github.com/containers/common digest to 630c929
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 16:57:58 +00:00
openshift-merge-bot[bot] 01a580e54d
Merge pull request #5208 from containers/renovate/github.com-openshift-imagebuilder-digest
fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
2023-12-01 14:46:37 +00:00
renovate[bot] bdbd69e386
fix(deps): update module github.com/moby/buildkit to v0.12.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 12:41:19 +00:00
renovate[bot] ec76cbb606
fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 10:31:10 +00:00
renovate[bot] b7a0f6b13f
fix(deps): update module github.com/containerd/containerd to v1.7.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-30 00:13:07 +00:00
renovate[bot] 76c9307fff
fix(deps): update module golang.org/x/crypto to v0.16.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-28 20:50:19 +00:00
openshift-merge-bot[bot] bbbb23ff80
Merge pull request #5184 from rhatdan/VENDOR
fix(deps): update module github.com/onsi/ginkgo to v2
2023-11-28 20:30:15 +00:00