[Snyk] Security upgrade io.kubernetes:client-java from 14.0.1 to 21.0.2 by VaniHaripriya · Pull Request #14 · VaniHaripriya/argo-workflows

VaniHaripriya · 2024-10-12T21:39:41Z

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

sdks/java/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Stack-based Buffer Overflow SNYK-JAVA-COMGOOGLEPROTOBUF-8055227	649	io.kubernetes:client-java: `14.0.1` -> `21.0.2` `Major version upgrade` `No Known Exploit`

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

* chore: Refactor the leader election Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com> * fix: codegen Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…j#8061) Signed-off-by: Vignesh Rajasekaran <vignesh@rvignesh.io>

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com>

…goproj#8169) Signed-off-by: William Van Hevelingen <william.vanhevelingen@acquia.com>

Signed-off-by: Ming Yu <mingyu.shi@zendesk.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com>

…rgoproj#8175) * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com>

…roj#8181) Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

* fix(executor): Retry kubectl on internal transient error fix(executor): Retry kubectl on internal transient error Signed-off-by: wujayway <wujayway@gmail.com> * add ut add ut Signed-off-by: wujayway <wujayway@gmail.com> * add ut add ut Signed-off-by: wujayway <wujayway@gmail.com>

* fix(plugins): set Content-Type request header Signed-off-by: Felix Seidel <felix@seidel.me> * fix(plugins): keep namespace from plugin manifest Signed-off-by: Felix Seidel <felix@seidel.me>

…goproj#7929) Signed-off-by: Rohan Kumar <rohankmr414@gmail.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com>

* fix(plugins): set Content-Type request header Signed-off-by: Felix Seidel <felix@seidel.me> * fix(plugins): keep namespace from plugin manifest Signed-off-by: Felix Seidel <felix@seidel.me>

* fix(executor): Retry kubectl on internal transient error fix(executor): Retry kubectl on internal transient error Signed-off-by: wujayway <wujayway@gmail.com> * add ut add ut Signed-off-by: wujayway <wujayway@gmail.com> * add ut add ut Signed-off-by: wujayway <wujayway@gmail.com>

…goproj#7929) Signed-off-by: Rohan Kumar <rohankmr414@gmail.com>

into release-3.3 Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…oproj#8297 (argoproj#8303) Signed-off-by: Dillen Padhiar <dpadhiar99@gmail.com>

… name of tracking branch (argoproj#8287) Signed-off-by: Dillen Padhiar <dpadhiar99@gmail.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com>

…ncing: Secure` (argoproj#8277) Signed-off-by: mikutas <23391543+mikutas@users.noreply.github.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…rgoproj#8175) * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> * fix: Correctly order emissary combined output. Fixes argoproj#8168 Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…rgoproj#8135) Signed-off-by: Alex Collins <alex_collins@intuit.com>

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

This reverts commit ef3fb42.

) Signed-off-by: Isitha Subasinghe <isitha@pipekit.io>

…ixes argoproj#9966) (argoproj#9967) Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>

Signed-off-by: Yuan Tang <terrytangyuan@gmail.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…ixes argoproj#10045 (argoproj#10047) Signed-off-by: Yuan Tang <terrytangyuan@gmail.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

…ependency

UPSTREAM: <carry>: Add staticfiles to Go module file

UPSTREAM: <carry>: update go.mod packages

Update go version to 1.21

Signed-off-by: vmudadla <vmudadla@redhat.com>

UPSTREAM: <carry>: Upgrade go.mod package versions

Signed-off-by: Ricardo M. Oliveira <rmartine@redhat.com>

Add CPaaS images for argoexec and workflowcontroller

Signed-off-by: Ricardo M. Oliveira <rmartine@redhat.com>

Remove CPaaS lines from Argo images

Signed-off-by: Mohammadi Iram <89964724+MohammadiIram@users.noreply.github.com>

Signed-off-by: vmudadla <vmudadla@redhat.com>

Rhoaieng 13747 CVE fix

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227

sarabala1979 and others added 30 commits March 3, 2022 21:21

fix: e2e

5d8651d

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: lint

e2c53e6

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: test

4decbea

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

Merge remote-tracking branch 'upstream/master' into release-3.3

15afec4

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

chore: Refactor the leader election (argoproj#8130)

c6f1e4a

* chore: Refactor the leader election Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com> * fix: codegen Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: pod deleted due to delayed cleanup. Fixes argoproj#8022 (argopro…

0cec273

…j#8061) Signed-off-by: Vignesh Rajasekaran <vignesh@rvignesh.io>

fix: Fix the TestStopBehavior flackiness (argoproj#8096)

049d3d1

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: Remove need for get pods from Emissary (argoproj#8133)

dfca6f1

Signed-off-by: Alex Collins <alex_collins@intuit.com>

fix: Limit workflows to 128KB and return a friendly error message (ar…

26471c8

…goproj#8169) Signed-off-by: William Van Hevelingen <william.vanhevelingen@acquia.com>

fix: add /etc/mime.types mapping table (argoproj#8171)

2b87f86

Signed-off-by: Ming Yu <mingyu.shi@zendesk.com>

fix: Add instance ID to workflowtaskresults (argoproj#8150)

442096b

Signed-off-by: Alex Collins <alex_collins@intuit.com>

fix: workflow.duration' is not available as a real time metric (argop…

ea36c33

…roj#8181) Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix(plugins): UX improvements (argoproj#8122)

4e543f2

* fix(plugins): set Content-Type request header Signed-off-by: Felix Seidel <felix@seidel.me> * fix(plugins): keep namespace from plugin manifest Signed-off-by: Felix Seidel <felix@seidel.me>

feat: add TLS config option to HTTP template. Fixes argoproj#7390 (ar…

5b14e15

…goproj#7929) Signed-off-by: Rohan Kumar <rohankmr414@gmail.com>

fix: Authentication for plugins. Fixes argoproj#8144 (argoproj#8147)

ad7d905

Signed-off-by: Alex Collins <alex_collins@intuit.com>

fix(plugins): UX improvements (argoproj#8122)

47b78d4

* fix(plugins): set Content-Type request header Signed-off-by: Felix Seidel <felix@seidel.me> * fix(plugins): keep namespace from plugin manifest Signed-off-by: Felix Seidel <felix@seidel.me>

feat: add TLS config option to HTTP template. Fixes argoproj#7390 (ar…

76ff748

…goproj#7929) Signed-off-by: Rohan Kumar <rohankmr414@gmail.com>

Merge branch 'release-3.3' of https://github.com/argoproj/argo-workflows

3d60693

into release-3.3 Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: reduce number of workflows displayed in UI by default. Fixes arg…

aa460b9

…oproj#8297 (argoproj#8303) Signed-off-by: Dillen Padhiar <dpadhiar99@gmail.com>

fix: fix: git artifact will be checked out even if local file matches…

3475831

… name of tracking branch (argoproj#8287) Signed-off-by: Dillen Padhiar <dpadhiar99@gmail.com>

fix: taskresults owned by pod rather than workflow. (argoproj#8284)

7e88021

Signed-off-by: Alex Collins <alex_collins@intuit.com>

fix: improve error message when the controller is set `templateRefere…

79a9a5b

…ncing: Secure` (argoproj#8277) Signed-off-by: mikutas <23391543+mikutas@users.noreply.github.com>

fix: Add instance ID to workflowtaskresults (argoproj#8150)

22c203f

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: Authentication for plugins. Fixes argoproj#8144 (argoproj#8147)

3a425ec

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: Update workflowtaskresult code have own reconciliation loop. (a…

af0cfab

…rgoproj#8135) Signed-off-by: Alex Collins <alex_collins@intuit.com>

fix: Add instance ID to workflowtaskresults (argoproj#8150)

918c273

Signed-off-by: Alex Collins <alex_collins@intuit.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

sarabala1979 and others added 27 commits August 8, 2022 16:49

fix: add containerRuntimeExecutor: emissary in ci

151432f

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: SignalsSuite test

e4dca01

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix: Skip TestRunAsNonRootWithOutputParams

b7b37d5

Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

Revert "fix: Correct kill command. Fixes argoproj#8687 (argoproj#8908)"

5db53aa

This reverts commit ef3fb42.

fix: cleaned key paths in gcs driver. Fixes argoproj#9958 (argoproj#9959

33bba51

) Signed-off-by: Isitha Subasinghe <isitha@pipekit.io>

fix: assume plugins may produce outputs.result and outputs.exitCode (F…

859bcb1

…ixes argoproj#9966) (argoproj#9967) Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>

fix: Upgrade kubectl to v1.24.8 to fix vulnerabilities (argoproj#10008)

fd31eb8

Signed-off-by: Yuan Tang <terrytangyuan@gmail.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

fix(operator): Workflow stuck at running when init container failed. F…

b19870d

…ixes argoproj#10045 (argoproj#10047) Signed-off-by: Yuan Tang <terrytangyuan@gmail.com> Signed-off-by: Saravanan Balasubramanian <sarabala1979@gmail.com>

UPSTREAM: <carry>: Update ui/package.json to use gitref for argo-ui d…

d96730c

…ependency

UPSTREAM: <carry>: Add staticfiles to Go module file

eb37984

Merge pull request #2 from rimolive/rmartine

9743dda

UPSTREAM: <carry>: Add staticfiles to Go module file

UPSTREAM: <carry>: update go.mod packages

d60f5c7

Merge pull request #5 from DharmitD/snyk-3.3-3

b02ca59

UPSTREAM: <carry>: update go.mod packages

UPSTREAM: <carry>: Update go version to 1.21

ac5cb18

Merge pull request #7 from DharmitD/argo-wf-go-1.21

c18871b

Update go version to 1.21

UPSTREAM: <carry>: Upgrade go.mod package versions

11c6657

Signed-off-by: vmudadla <vmudadla@redhat.com>

Merge pull request #10 from VaniHaripriya/RHOAIENG-10033-NEW

c65043a

UPSTREAM: <carry>: Upgrade go.mod package versions

Add CPaaS images for argoexec and workflowcontroller

7b2d430

Signed-off-by: Ricardo M. Oliveira <rmartine@redhat.com>

Merge pull request #1 from rimolive/rmartine-rhds

8c78135

Add CPaaS images for argoexec and workflowcontroller

Remove CPaaS lines from Argo images

69b2a31

Signed-off-by: Ricardo M. Oliveira <rmartine@redhat.com>

Merge pull request #2 from rimolive/rmartine-rhds

70769a4

Remove CPaaS lines from Argo images

Update Dockerfile.workflowcontroller

81fbd67

Signed-off-by: Mohammadi Iram <89964724+MohammadiIram@users.noreply.github.com>

Update Dockerfile.workflowcontroller

19fc17c

Signed-off-by: Mohammadi Iram <89964724+MohammadiIram@users.noreply.github.com>

fix: Upgrade go.mod package versions

5b38479

Signed-off-by: vmudadla <vmudadla@redhat.com>

fix: update go.mod packages

61896f7

Signed-off-by: vmudadla <vmudadla@redhat.com>

Merge pull request #13 from VaniHaripriya/RHOAIENG-13747-CVE-FIX

abf7b5a

Rhoaieng 13747 CVE fix

fix: sdks/java/pom.xml to reduce vulnerabilities

279ed53

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227

VaniHaripriya force-pushed the main branch 2 times, most recently from 19fc17c to cfa1672 Compare October 16, 2024 15:20

VaniHaripriya force-pushed the main branch from d9c26c3 to b9f4baf Compare November 15, 2024 16:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade io.kubernetes:client-java from 14.0.1 to 21.0.2#14

[Snyk] Security upgrade io.kubernetes:client-java from 14.0.1 to 21.0.2#14
VaniHaripriya wants to merge 139 commits into
mainfrom
snyk-fix-cca87a7f3d140b1490ace21338361734

VaniHaripriya commented Oct 12, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

VaniHaripriya commented Oct 12, 2024

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants