Bump odh 0.12.rc0 to rhoai main branch #10
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Plus: Fixes lint issues: - Can't run linter goanalysis_metalinter: goanalysis_metalinter: buildir: package "netip" (isInitialPkg: false, needAnalyzeSource: true): in net/netip.AddrFromSlice: cannot convert Load <[]byte> t0 ([]byte) to [4]byte Warnings: WARN [runner] The linter 'structcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'deadcode' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'varcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. Signed-off-by: Spolti <[email protected]>
[RHODS-12555] - CVE-2023-44487
Add configuration file for CodeQL vulnerability scanning. Signed-off-by: Christian Kadner <[email protected]>
Specify and link python38 to fix build/test failures due to the wrong Python version (3.6) being used from base image. --------- Signed-off-by: Rafael Vasquez <[email protected]>
Specify and link python38 to fix build/test failures due to the wrong Python version (3.6) being used from base image. --------- Signed-off-by: Rafael Vasquez <[email protected]>
fix: Specify Python 3.8 in Dockerfile (opendatahub-io#34)
Signed-off-by: Spolti <[email protected]>
Fix github.com/elazarl/goproxy Denial of Service
…b-io#30) Issues addressed: - https://github.com/kserve/rest-proxy/security/dependabot/1 - https://github.com/kserve/rest-proxy/security/dependabot/2 - https://github.com/kserve/rest-proxy/security/dependabot/3 - https://github.com/kserve/rest-proxy/security/dependabot/4 - https://github.com/kserve/rest-proxy/security/dependabot/5 - https://www.cve.org/CVERecord?id=CVE-2023-37788 --------- Signed-off-by: Spolti <[email protected]>
- Remove the linters for "deadcode", "structcheck", "varcheck" - Use "os" packages instead of deprecated "io/ioutil" (SA1019) - Capture pre-commit output in a local log file --------- Signed-off-by: Spolti <[email protected]>
chore: Fixes google.golang.org/protobuf Stack-based Buffer Overflow https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908 Signed-off-by: Spolti <[email protected]>
chore: address the following CVE: - [CVE-2023-48795](https://www.cve.org/CVERecord?id=CVE-2023-48795): golang.org/x/crypto Authentication Bypass by Capture-replay --------- Signed-off-by: Spolti <[email protected]>
Plus: Fixes lint issues: - Can't run linter goanalysis_metalinter: goanalysis_metalinter: buildir: package "netip" (isInitialPkg: false, needAnalyzeSource: true): in net/netip.AddrFromSlice: cannot convert Load <[]byte> t0 ([]byte) to [4]byte Warnings: WARN [runner] The linter 'structcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'deadcode' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. WARN [runner] The linter 'varcheck' is deprecated (since v1.49.0) due to: The owner seems to have abandoned the linter. Replaced by unused. Signed-off-by: Spolti <[email protected]>
Specify and link python38 to fix build/test failures due to the wrong Python version (3.6) being used from base image. --------- Signed-off-by: Rafael Vasquez <[email protected]> Signed-off-by: Spolti <[email protected]>
Signed-off-by: Spolti <[email protected]>
Add configuration file for CodeQL vulnerability scanning. Signed-off-by: Christian Kadner <[email protected]> Signed-off-by: Spolti <[email protected]>
…b-io#30) Issues addressed: - https://github.com/kserve/rest-proxy/security/dependabot/1 - https://github.com/kserve/rest-proxy/security/dependabot/2 - https://github.com/kserve/rest-proxy/security/dependabot/3 - https://github.com/kserve/rest-proxy/security/dependabot/4 - https://github.com/kserve/rest-proxy/security/dependabot/5 - https://www.cve.org/CVERecord?id=CVE-2023-37788 --------- Signed-off-by: Spolti <[email protected]>
- Remove the linters for "deadcode", "structcheck", "varcheck" - Use "os" packages instead of deprecated "io/ioutil" (SA1019) - Capture pre-commit output in a local log file --------- Signed-off-by: Spolti <[email protected]>
chore: Fixes google.golang.org/protobuf Stack-based Buffer Overflow https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908 Signed-off-by: Spolti <[email protected]>
chore: address the following CVE: - [CVE-2023-48795](https://www.cve.org/CVERecord?id=CVE-2023-48795): golang.org/x/crypto Authentication Bypass by Capture-replay --------- Signed-off-by: Spolti <[email protected]>
Signed-off-by: Filippe Spolti <[email protected]>
sync kserve/rest-proxy with odh/rest-proxy
Signed-off-by: Selbi Nuryyeva <[email protected]>
Update OWNERS in main branch
Some developers might not have the `docker` CLI installed anymore. Configurable builder allows to build using `podman` or `buildah`. It can be invoked like this: `ENGINE=podman make build` --------- Signed-off-by: Spolti <[email protected]> Signed-off-by: Filippe Spolti <[email protected]>
This is to move away from CVE-20204-24786: infinite loop vulnerability. Signed-off-by: Edgar Hernández <[email protected]>
Signed-off-by: rpancham <[email protected]>
Add Tag and Release workflow
[RHOAIENG-5424] - golang.org/x/net Allocation of Resources Without Limits or Throttling chore: Fixes [CVE-2023-45288](https://www.cve.org/CVERecord?id=CVE-2023-45288) Signed-off-by: Spolti <[email protected]>
[pull] main from kserve:main
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bump odh 0.12.rc0 to rhoai main branch