Skip to content

v0.30.2
Compare
Choose a tag to compare
@piyush-garg piyush-garg released this 20 Oct 20:02
· 399 commits to main since this release
v0.30.2
This tag was signed with the committer’s verified signature.
piyush-garg Piyush Garg
GPG key ID: 1515A55DD597DDE8
Learn about vigilant mode.
a0cd3a2
This commit was signed with the committer’s verified signature.
piyush-garg Piyush Garg
GPG key ID: 1515A55DD597DDE8
Learn about vigilant mode.

v0.30.2 Release 🎉

This is a patch release addressing a security issue on the golang.org/x/net and github.com/grpc/grpc-go dependency:

  • HTTP/2 rapid reset can cause excessive work in net/http - commits
  • This addresses GHSA-qppj-fm5r-hxr3 by not allowing more server handlers to be run than the HTTP/2 MAX_CONCURRENT_STREAMS setting.

ChangeLog 📋

Misc 🔨

  • Bump tektoncd/pipeline to v0.44.5 acaf6b0
  • Bump hub to v1.12.4 6e45473
  • Bump grpc to v1.56.3 0c7e872
  • Bump tektoncd/triggers to v0.23.2 2419aa6

Thanks ❤️

Contributors

piyush-garg
Assets 18
Loading