.: bump golang.org/x/net to v0.17.0

Bumping golang.org/x/net in light of CVE-2023-39325 and CVE-2023-44487. Signed-off-by: Madhav Jivrajani <[email protected]> Kubernetes-commit: ff52c6daa8ce633bb94bdc3e8e80f4eebf3a2e39
kubernetes · Oct 10, 2023 · 7e4d54e · 7e4d54e
1 parent b03564e
commit 7e4d54e
Show file tree

Hide file tree

Showing 2 changed files with 57 additions and 43 deletions.
diff --git a/go.mod b/go.mod
@@ -23,12 +23,12 @@ require (
 	google.golang.org/grpc v1.51.0
 	google.golang.org/protobuf v1.28.1
 	gopkg.in/yaml.v2 v2.4.0
-	k8s.io/api v0.0.0-20230828183613-acad30015007
-	k8s.io/apimachinery v0.0.0-20230922082047-9351cc4c859a
-	k8s.io/apiserver v0.0.0-20230922111915-e6b800278dde
-	k8s.io/client-go v0.0.0-20230904105423-fa3c65eff08b
-	k8s.io/code-generator v0.0.0-20230705153058-ad209354fb6b
-	k8s.io/component-base v0.0.0-20230705190003-c964270bd046
+	k8s.io/api v0.0.0
+	k8s.io/apimachinery v0.0.0
+	k8s.io/apiserver v0.0.0
+	k8s.io/client-go v0.0.0
+	k8s.io/code-generator v0.0.0
+	k8s.io/component-base v0.0.0
 	k8s.io/klog/v2 v2.90.1
 	k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f
 	k8s.io/utils v0.0.0-20230209194617-a36077c30491
@@ -105,31 +105,32 @@ require (
 	go.uber.org/atomic v1.7.0 // indirect
 	go.uber.org/multierr v1.6.0 // indirect
 	go.uber.org/zap v1.19.0 // indirect
-	golang.org/x/crypto v0.1.0 // indirect
+	golang.org/x/crypto v0.14.0 // indirect
 	golang.org/x/mod v0.9.0 // indirect
-	golang.org/x/net v0.8.0 // indirect
+	golang.org/x/net v0.17.0 // indirect
 	golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b // indirect
 	golang.org/x/sync v0.1.0 // indirect
-	golang.org/x/sys v0.6.0 // indirect
-	golang.org/x/term v0.6.0 // indirect
-	golang.org/x/text v0.8.0 // indirect
+	golang.org/x/sys v0.13.0 // indirect
+	golang.org/x/term v0.13.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
 	golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 // indirect
 	golang.org/x/tools v0.7.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/gengo v0.0.0-20220902162205-c0856e24416d // indirect
-	k8s.io/kms v0.0.0-20230612180710-1a96b5630cc5 // indirect
+	k8s.io/kms v0.0.0 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.1.2 // indirect
 )
 
 replace (
-	k8s.io/api => k8s.io/api v0.0.0-20230828183613-acad30015007
-	k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20230922082047-9351cc4c859a
-	k8s.io/apiserver => k8s.io/apiserver v0.0.0-20230922111915-e6b800278dde
-	k8s.io/client-go => k8s.io/client-go v0.0.0-20230904105423-fa3c65eff08b
-	k8s.io/code-generator => k8s.io/code-generator v0.0.0-20230705153058-ad209354fb6b
-	k8s.io/component-base => k8s.io/component-base v0.0.0-20230705190003-c964270bd046
-	k8s.io/kms => k8s.io/kms v0.0.0-20230612180710-1a96b5630cc5
+	k8s.io/api => ../api
+	k8s.io/apiextensions-apiserver => ../apiextensions-apiserver
+	k8s.io/apimachinery => ../apimachinery
+	k8s.io/apiserver => ../apiserver
+	k8s.io/client-go => ../client-go
+	k8s.io/code-generator => ../code-generator
+	k8s.io/component-base => ../component-base
+	k8s.io/kms => ../kms
 )