Skip to content

Updated dependencies for kf - #1124

Merged
matix522 merged 3 commits into
mainfrom
hurbol/update-dependencies
Sep 4, 2026
Merged

matix522 merged 3 commits into
mainfrom
hurbol/update-dependencies

Conversation

@matix522

@matix522 matix522 commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Proposed Changes

  • Security: Upgraded Anthos Service Mesh to 1.29.7-asm.2
  • Changed: Updated subresource-apiserver and build TaskRun Workload Identity init container (wait-for-wi) image to cloud-sdk:alpine to prevent image pull errors.
  • Changed: Aligned release asmcli installer script and gateway samples to version 1.29.
  • Infrastructure: Updated Cloud Build pipelines and release tooling to use active cloud-sdk:alpine builder images.

Release Notes

* `Security`: Upgraded Anthos Service Mesh to 1.29.7-asm.2 to resolve CVE-2026-73513 (GCP-2026-057).
* `Changed`: Updated subresource-apiserver and build TaskRun Workload Identity init container (wait-for-wi) image to cloud-sdk:alpine to prevent image pull errors.
* `Changed`: Aligned release asmcli installer script and gateway samples to version 1.29.
* `Infrastructure`: Updated Cloud Build pipelines and release tooling to use active cloud-sdk:alpine builder images.

Risks and mitigations

Low risk. Standard patch release updating Anthos Service Mesh to latest security patch and updating Cloud SDK base images.

Dependencies

Dependency Version
Tekton v1.12.2
Anthos Service Mesh 1.29.7-asm.2
Config Connector 1.153.0

@matix522 matix522 changed the title upddated dependencies for kf UIpdated dependencies for kf Sep 2, 2026
@matix522 matix522 changed the title UIpdated dependencies for kf Updated dependencies for kf Sep 2, 2026
@matix522
matix522 force-pushed the hurbol/update-dependencies branch from f43efa2 to c7d9aa4 Compare September 2, 2026 10:58

@jakweg jakweg left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matix522
matix522 merged commit 0c696ad into main Sep 4, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants