Skip to content

Bump github.com/brancz/kube-rbac-proxy from 0.23.0 to 0.23.1 in /hack/kube-rbac-proxy - #610

Merged
scothis merged 1 commit into
mainfrom
dependabot/go_modules/hack/kube-rbac-proxy/github.com/brancz/kube-rbac-proxy-0.23.1
Oct 28, 2026
Merged

scothis merged 1 commit into
mainfrom
dependabot/go_modules/hack/kube-rbac-proxy/github.com/brancz/kube-rbac-proxy-0.23.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/brancz/kube-rbac-proxy from 0.23.0 to 0.23.1.

Release notes

Sourced from github.com/brancz/kube-rbac-proxy's releases.

v0.23.1

Changelog

  • [ENHANCEMENT] Bump dependencies
  • [BUGFIX] Update Go to 1.27.3 (fixes 12 reachable stdlib vulnerabilities: GO-2026-6809 crypto/x509 distrust of compromised intermediate certificates, GO-2026-6617 net/http HTTP/2 server crash due to HPACK encoder race, GO-2026-6613 net/http HTTP/1 server desynchronization after 2xx CONNECT response, GO-2026-6612 net/http HTTP/2 double flow control refund, GO-2026-6611 net/http HTTP/2 excessive CPU from repeated initial window changes, GO-2026-6610 net/http HTTP/2 transport accepting malformed framing headers, GO-2026-6608 net/textproto MIME header memory limit bypass, GO-2026-6607 crypto/tls malformed ECH outer extension references, GO-2026-6605 net/http HTTP/1 client desynchronization after CONNECT rejection, GO-2026-6603 net/http HTTP/2 server memory exhaustion via Trailer headers, GO-2026-6600 and GO-2026-6599 html/template context tracking)
  • [BUGFIX] Update golang.org/x/net to v0.61.0 (fixes GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617)

Container Images

This release is available from:

  • quay.io/brancz/kube-rbac-proxy:v0.23.1
  • ghcr.io/kube-rbac-proxy/kube-rbac-proxy:v0.23.1

See CHANGELOG.md for details.

Changelog

Sourced from github.com/brancz/kube-rbac-proxy's changelog.

0.23.1 / 2026-10-23

  • [ENHANCEMENT] Bump dependencies
  • [BUGFIX] Update Go to 1.27.3 (fixes 12 reachable stdlib vulnerabilities: GO-2026-6809 crypto/x509 distrust of compromised intermediate certificates, GO-2026-6617 net/http HTTP/2 server crash due to HPACK encoder race, GO-2026-6613 net/http HTTP/1 server desynchronization after 2xx CONNECT response, GO-2026-6612 net/http HTTP/2 double flow control refund, GO-2026-6611 net/http HTTP/2 excessive CPU from repeated initial window changes, GO-2026-6610 net/http HTTP/2 transport accepting malformed framing headers, GO-2026-6608 net/textproto MIME header memory limit bypass, GO-2026-6607 crypto/tls malformed ECH outer extension references, GO-2026-6605 net/http HTTP/1 client desynchronization after CONNECT rejection, GO-2026-6603 net/http HTTP/2 server memory exhaustion via Trailer headers, GO-2026-6600 and GO-2026-6599 html/template context tracking)
  • [BUGFIX] Update golang.org/x/net to v0.61.0 (fixes GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/brancz/kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) from 0.23.0 to 0.23.1.
- [Release notes](https://github.com/brancz/kube-rbac-proxy/releases)
- [Changelog](https://github.com/kube-rbac-proxy/kube-rbac-proxy/blob/master/CHANGELOG.md)
- [Commits](kube-rbac-proxy/kube-rbac-proxy@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/brancz/kube-rbac-proxy
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 28, 2026
@codecov

codecov Bot commented Oct 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.27%. Comparing base (4654ef6) to head (538ccff).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #610   +/-   ##
=======================================
  Coverage   73.27%   73.27%           
=======================================
  Files          28       28           
  Lines        1474     1474           
=======================================
  Hits         1080     1080           
  Misses        324      324           
  Partials       70       70           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@scothis
scothis merged commit 2bb40e8 into main Oct 28, 2026
24 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/hack/kube-rbac-proxy/github.com/brancz/kube-rbac-proxy-0.23.1 branch October 28, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant