Merge pull request #22 from Leaseweb/k8s_12615

Bump k8s deps to v1.26.15

CHANGES.md

@@ -1,7 +1,14 @@
 Apache CloudStack Kubernetes Provider Changelog
 ===============================================
 
-Version 1.0.0
--------------
+Unreleased
+---
+
+### Dependencies
+
+- Updated Kubernetes deps to v1.26.15 to resolve a moderate level security issue in protobuf (CVE-2024-24786)
+
+v1.0.0
+----
 
 This is the first release of the CloudStack Kubernetes Provider.

go.mod

@@ -9,10 +9,10 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.1
 	gopkg.in/gcfg.v1 v1.2.3
-	k8s.io/api v0.26.14
-	k8s.io/apimachinery v0.26.14
-	k8s.io/cloud-provider v0.26.14
-	k8s.io/component-base v0.26.14
+	k8s.io/api v0.26.15
+	k8s.io/apimachinery v0.26.15
+	k8s.io/cloud-provider v0.26.15
+	k8s.io/component-base v0.26.15
 	k8s.io/klog/v2 v2.80.1
 )
 
@@ -38,7 +38,7 @@ require (
 	github.com/go-openapi/swag v0.19.14 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/cel-go v0.12.7 // indirect
 	github.com/google/gnostic v0.5.7-v3refs // indirect
 	github.com/google/gofuzz v1.1.0 // indirect
@@ -92,17 +92,17 @@ require (
 	google.golang.org/genproto/googleapis/api v0.0.0-20230525234020-1aefcd67740a // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20230525234030-28d5490b6b19 // indirect
 	google.golang.org/grpc v1.56.3 // indirect
-	google.golang.org/protobuf v1.31.0 // indirect
+	google.golang.org/protobuf v1.33.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
 	gopkg.in/warnings.v0 v0.1.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiserver v0.26.14 // indirect
-	k8s.io/client-go v0.26.14 // indirect
-	k8s.io/component-helpers v0.26.14 // indirect
-	k8s.io/controller-manager v0.26.14 // indirect
-	k8s.io/kms v0.26.14 // indirect
+	k8s.io/apiserver v0.26.15 // indirect
+	k8s.io/client-go v0.26.15 // indirect
+	k8s.io/component-helpers v0.26.15 // indirect
+	k8s.io/controller-manager v0.26.15 // indirect
+	k8s.io/kms v0.26.15 // indirect
 	k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280 // indirect
 	k8s.io/utils v0.0.0-20221107191617-1a15be271d1d // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.37 // indirect
@@ -112,10 +112,10 @@ require (
 )
 
 replace (
-	k8s.io/component-helpers => k8s.io/component-helpers v0.26.14
-	k8s.io/controller-manager => k8s.io/controller-manager v0.26.14
-	k8s.io/kubectl => k8s.io/kubectl v0.26.14
-	k8s.io/mount-utils => k8s.io/mount-utils v0.26.14
-	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.26.14
-	k8s.io/sample-controller => k8s.io/sample-controller v0.26.14
+	k8s.io/component-helpers => k8s.io/component-helpers v0.26.15
+	k8s.io/controller-manager => k8s.io/controller-manager v0.26.15
+	k8s.io/kubectl => k8s.io/kubectl v0.26.15
+	k8s.io/mount-utils => k8s.io/mount-utils v0.26.15
+	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.26.15
+	k8s.io/sample-controller => k8s.io/sample-controller v0.26.15
 )