From b1cb4d41f11bd4820ba27a6c6608901ab10aa1a3 Mon Sep 17 00:00:00 2001 From: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com> Date: Fri, 14 Jul 2023 09:07:37 +0000 Subject: [PATCH 1/2] nvidia-device-plugin/0.14.1 package update --- nvidia-device-plugin.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/nvidia-device-plugin.yaml b/nvidia-device-plugin.yaml index cffc9a32ac1..ef6235d8f47 100644 --- a/nvidia-device-plugin.yaml +++ b/nvidia-device-plugin.yaml @@ -1,7 +1,7 @@ package: name: nvidia-device-plugin - version: 0.14.0 - epoch: 4 + version: 0.14.1 + epoch: 0 description: NVIDIA device plugin for Kubernetes copyright: - license: Apache-2.0 @@ -19,7 +19,7 @@ pipeline: with: repository: https://github.com/NVIDIA/k8s-device-plugin tag: v${{package.version}} - expected-commit: e6c111aff19eab995e8d0f4345169e8c310d2f9c + expected-commit: 7086f91dfcd0cd7b06863be4a315ba873f0b81f9 - runs: | # GHSA-g2j6-57v7-gm8c From afff3b0b1d860b9a17140bdf97a2fc5ade39cf05 Mon Sep 17 00:00:00 2001 From: James Rawlings Date: Fri, 14 Jul 2023 12:49:16 +0100 Subject: [PATCH 2/2] remove mitigations as they have been upgraded upstream with [this release](https://github.com/NVIDIA/k8s-device-plugin/blob/v0.14.1/go.mod) Signed-off-by: James Rawlings --- nvidia-device-plugin.yaml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/nvidia-device-plugin.yaml b/nvidia-device-plugin.yaml index ef6235d8f47..26c1af13bdc 100644 --- a/nvidia-device-plugin.yaml +++ b/nvidia-device-plugin.yaml @@ -22,14 +22,6 @@ pipeline: expected-commit: 7086f91dfcd0cd7b06863be4a315ba873f0b81f9 - runs: | - # GHSA-g2j6-57v7-gm8c - go get github.com/opencontainers/runc@v1.1.5 - - # GHSA-8cfg-vx93-jvxw - go get k8s.io/client-go@v0.20.0-alpha.2 - - go mod vendor - make mkdir -p ${{targets.destdir}}/usr/bin mv config-manager ${{targets.destdir}}/usr/bin/