Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: (IAC-1260) Update Dependencies to remediate security vulnerabilities #358

Merged
merged 3 commits into from
Jan 17, 2024

Conversation

riragh
Copy link
Member

@riragh riragh commented Jan 16, 2024

Changes:

Updates 3rd party dependencies to resolve the security vulnerabilities. Users of the Dockerfile will automatically have these updated dependencies installed, and users who directly run this project on the host will need to update the dependencies themselves.

Update summary:

  • terraform 1.6.4 -> 1.6.6
    • not a breaking change.
  • Azure CLI 2.54.0 -> 2.56.0
    • includes dependency updates to address upstream CVEs, not a breaking change
  • hashicorp/azurerm from 3.81.0 to 3.86.0
    • bug fixes, features and enhancements, no breaking change, provider changes are transparent to users
  • hashicorp/azuread from 2.46.0 to 2.47.0
    • not a breaking change
  • hashicorp/local from 2.4.0 to 2.4.1
    • no functional changes, no breaking change
  • hashicorp/tls from 4.0.4 to 4.0.5
    • includes dependency updates to address upstream CVEs, not a breaking change
  • hashicorp/cloudinit from 2.3.2 to 2.3.3
    • no functional changes, does include dependency updates to address upstream CVEs
  • hashicorp/kubernetes from 2.23.0 to 2.25.1
    • docs, bug fixes and enhancements. Not a breaking change

Tests

Scenario Provider K8s version Order Cadence
1 Azure 1.27.7  ****  stable:2023.12

@riragh riragh added the enhancement New feature or request label Jan 16, 2024
@riragh riragh self-assigned this Jan 16, 2024
Copy link
Member

@thpang thpang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@riragh riragh merged commit e9d36a5 into staging Jan 17, 2024
3 checks passed
@riragh riragh deleted the IAC-1260 branch January 17, 2024 17:55
@riragh riragh mentioned this pull request Jan 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants