From 1ba68c167c18bef585e64e9bc60a7f01234e008e Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Sat, 11 Oct 2025 10:22:58 +0000 Subject: [PATCH 1/2] k3s-1.33/1.33.5.1-r0: fix GHSA-47m2-4cr7-mhcw --- k3s-1.33.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/k3s-1.33.yaml b/k3s-1.33.yaml index cafd4aa921e6..89617f6870a6 100644 --- a/k3s-1.33.yaml +++ b/k3s-1.33.yaml @@ -1,7 +1,7 @@ package: name: k3s-1.33 version: "1.33.5.1" - epoch: 0 + epoch: 1 # GHSA-47m2-4cr7-mhcw description: copyright: - license: Apache-2.0 @@ -64,6 +64,7 @@ pipeline: with: deps: |- github.com/pion/interceptor@v0.1.39 + github.com/quic-go/quic-go@v0.54.1 # Build things (almost) identical to upstream, with the k3s components # embedded in the "outer" multicall binary. From e97eef9f8b810507441e71a4206d755ae88dbb7f Mon Sep 17 00:00:00 2001 From: Ankush Pathak Date: Tue, 14 Oct 2025 07:20:00 +0000 Subject: [PATCH 2/2] fix(k3s-1.33): Fix build failures due to quic-go bump Signed-off-by: Ankush Pathak --- k3s-1.33.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/k3s-1.33.yaml b/k3s-1.33.yaml index 89617f6870a6..765a053b2602 100644 --- a/k3s-1.33.yaml +++ b/k3s-1.33.yaml @@ -65,6 +65,8 @@ pipeline: deps: |- github.com/pion/interceptor@v0.1.39 github.com/quic-go/quic-go@v0.54.1 + github.com/quic-go/webtransport-go@v0.9.0 + github.com/libp2p/go-libp2p@v0.44.0 # Build things (almost) identical to upstream, with the k3s components # embedded in the "outer" multicall binary.