Skip to content

Update CoreDNS to v1.14.7 for 1-33 through 1-37 and sync networking CVE patches for 1-31 through 1-37 - #5003

Closed
nihalnurs wants to merge 2 commits into
aws:mainfrom
nihalnurs:coredns-cve-sync-v1.14.7
Closed

Update CoreDNS to v1.14.7 for 1-33 through 1-37 and sync networking CVE patches for 1-31 through 1-37#5003
nihalnurs wants to merge 2 commits into
aws:mainfrom
nihalnurs:coredns-cve-sync-v1.14.7

Conversation

@nihalnurs

@nihalnurs nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member

Description of changes:

  • 1-31, 1-32 (v1.12.4): add the networking team's patches 0038-0040 (EDNS0 rewrite nil-pointer fix, request accept policy on DoH/DoQ/gRPC, golang.org/x/net). 0001-0037 are unchanged and identical to networking's set.
  • 1-33 to 1-37: bump GIT_TAG v1.14.6 -> v1.14.7 and replace patches with networking's v1.14 set (0001-0005: grpc, x/mod, x/crypto, etcd client, x/net). Networking only maintains patches for v1.14.7. The go-stdlib go.mod patches are dropped because v1.14.7 already declares go 1.26.0.
  • README version table updated.
  • No downgrade: managed addon is v1.11.4 (1.31-1.32), v1.13.2 (1.33-1.34), v1.14.7 (1.35-1.37).
  • All patches verified to apply cleanly with git am on upstream v1.12.4 and v1.14.7.
  • CHECKSUMS will be updated from the presubmit output.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@nihalnurs
Update CoreDNS to v1.14.7 for 1-33 through 1-37 and sync networking C…
fe15a11 
…VE patches for 1-31 through 1-37

1-31, 1-32 (v1.12.4): add networking patches 0038-0040.
1-33 to 1-37: v1.14.6 -> v1.14.7 (managed addon for 1.35-1.37 is v1.14.7-eksbuild.19) and replace patches with networking's v1.14 set 0001-0005. The go-stdlib go.mod patches are dropped; v1.14.7 already declares go 1.26.0.
CHECKSUMS to follow from presubmit.
@eks-distro-bot

eks-distro-bot commented Oct 24, 2026

Copy link
Copy Markdown
Collaborator

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign torredil for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions github-actions Bot added patch Pull request that add .patch files project Adds, Removes, or updates GIT_TAG in projects folder v1.31 v1.32 v1.33 v1.34 v1.35 v1.36 v1.37 labels Oct 24, 2026
@nihalnurs

nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member Author

/retest

1 similar comment
@nihalnurs

nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member Author

/retest

@nihalnurs

nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member Author

/retest-required

@nihalnurs

nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member Author

/restest coredns-1-33-presubmit

@nihalnurs

nihalnurs commented Oct 24, 2026

Copy link
Copy Markdown
Member Author

/retest

1 similar comment
@charles-large

charles-large commented Oct 24, 2026

Copy link
Copy Markdown
Member

/retest

@eks-distro-bot

eks-distro-bot commented Oct 24, 2026

Copy link
Copy Markdown
Collaborator

@nihalnurs: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
coredns-1-37-presubmit 5a2270c link true /test coredns-1-37-presubmit
coredns-1-35-presubmit 5a2270c link true /test coredns-1-35-presubmit
coredns-1-33-presubmit 5a2270c link true /test coredns-1-33-presubmit
coredns-1-36-presubmit 5a2270c link true /test coredns-1-36-presubmit
coredns-1-34-presubmit 5a2270c link true /test coredns-1-34-presubmit

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@charles-large charles-large mentioned this pull request Oct 24, 2026
Merged
@nihalnurs

nihalnurs commented Oct 26, 2026

Copy link
Copy Markdown
Member Author

Superseded by #5006 (all changes already on main).

@nihalnurs nihalnurs closed this Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

patch Pull request that add .patch files project Adds, Removes, or updates GIT_TAG in projects folder size/XXL v1.31 v1.32 v1.33 v1.34 v1.35 v1.36 v1.37

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@nihalnurs @eks-distro-bot @charles-large