kubernetes-sigs / karpenter / 9386622243

78%

main: 81%

Build Type

Pull #1298

github

Committed by fmuyassarov

Commit Message

Bump go patch version to have netip related vulnerabilities fixed.

Without bumping to 1.22.4 we will have the following issue:
Vulnerability #1: GO-2024-2887
    Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in
    net/netip
  More info: https://pkg.go.dev/vuln/GO-2024-2887
  Standard library
    Found in: net/netip@go1.22.3
    Fixed in: net/netip@go1.22.4
    Example traces found:
      #1: pkg/test/environment.go:101:31: test.NewEnvironment calls
		envtest.Environment.Start, which eventually calls netip.Addr.IsLoopback
      #2: pkg/test/environment.go:101:31: test.NewEnvironment calls
		envtest.Environment.Start, which eventually calls netip.Addr.IsMulticast

Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>

Pull Request Pull Request #1298: chore: replace custom utils functions with k8s.io/kubernetes library

Run Details

5 of 5 new or added lines in 3 files covered. (100.0%)

2 existing lines in 1 file now uncovered.

8270 of 10609 relevant lines covered (77.95%)

111803.1 hits per line