Commit graph

3 commits

Author SHA1 Message Date
tomsweeneyredhat
2ba0070cc4
Bump runc to 1.2.9, Buildah 1.29.6
Cherry picked from commit 2e8bce201e with
additional updates required for the v4.2.0-rhel branch.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>

Assisted by AI: Cursor <Auto>
Signed-off-by: Chris Evich <cevich@redhat.com>
2026-01-28 10:45:58 -05:00
tomsweeneyredhat
e1b0a045d4 [v4.2.0-rhel] Bump Buildah to v1.27.4
As the title says.  Bumping to address:
CVE-2024-1753

https://issues.redhat.com/browse/RHEL-26761

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-04-02 16:52:20 -04:00
Paul Holzinger
774271c38a
upgrade all dependencies
The dependabot does not update dependencies when they do not use a tag.
This patch upgrades all untagged depenencies if possible.

You can upgrade all dependencies with `go get -u ./... && make vendor`
in theory however this failed since the k8s changes do not compile on
go v1.16 so I only updated the other dependencies.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-01-18 16:27:00 +01:00