kubernetes-sigs / kubernetes-sigs/node-local-dns

Cutting new versions

Open
#33 2 comments 5 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
11
Forks
9
Avg merge
12h 52m
Merged PRs (30d)
1

Description

We have various security scanning tools scanning the binaries that run in our infrastructure, and they've flagged some binaries with associated CVEs in the node-cache binaries. Several of them are definitely false positives, but in practice it is usually easier to just upgrade the dependencies than trying to get an exception filed, so currently we have a number of local patches to upgrade dependencies before building the binary ourselves.

I've noticed that several of the things we've patched have been merged into `master` here, there's (at time of writing) 29 commits on `master` since the last release (1.26.8).

It looks like no new versions have been released since things were moved from [kubernetes/dns](https://github.com/kubernetes/dns) to this repository, I was wondering if there were any plans to do so soon?

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the repository history for the 29 commits on master since release 1.26.8 and compare the current binaries with the last published version. Done would mean establishing and carrying out a clear process for publishing a new version that includes the relevant dependency updates.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
release
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.