chore: backport PR 20260910 - #1354
Merged
Arvind Thirumurugan (Arvindthiru) merged 11 commits intoSep 11, 2026
Merged
Conversation
…ker (Azure#879) Bumps oss/go/microsoft/golang from 1.26.6-1 to 1.26.8-1. --- updated-dependencies: - dependency-name: oss/go/microsoft/golang dependency-version: 1.26.8-1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…rseded (Azure#885) Minor fixes Signed-off-by: michaelawyu <chenyu1@microsoft.com>
…ted APIs (Azure#827) Merging this to unblock progress.
…zure#812) `ClusterClaim.spec.clusterSelectorTerms` could be removed after creation because Kubernetes skips field-level transition rules when an optional field becomes absent. This silently widened the request to match any member cluster. - Add a spec-level CEL presence guard alongside the existing field-level immutability rule, and regenerate the ClusterClaim CRD. - Cover the regression with an envtest in the new test/apis/kubefleet.dev/placement/v1alpha1 suite. Fixes Azure#810
…d deps (Azure#887) * Initial plan * fix: remediate trivy CVEs from 2026-W37 Co-authored-by: britaniar <145056127+britaniar@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: britaniar <145056127+britaniar@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: britaniar <145056127+britaniar@users.noreply.github.com>
Signed-off-by: Arvind Thirumurugan <arvindth@microsoft.com>
Chen Yu (michaelawyu)
approved these changes
Sep 11, 2026
Chen Yu (michaelawyu)
left a comment
Contributor
There was a problem hiding this comment.
LGTM ;) Thanks, Arvind!
Britania Rodriguez Reyes (britaniar)
approved these changes
Sep 11, 2026
Arvind Thirumurugan (Arvindthiru)
merged commit Sep 11, 2026
0b53a06
into
Azure:main
27 of 28 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description of your changes
64d4330 (cncf/main) chore: bump github/codeql-action/init from 4.37.7 to 4.37.8 (kubefleet-dev/kubefleet#856)
e6d8642 chore: upgrade golang.org/x/crypto to v0.56.0 (kubefleet-dev/kubefleet#908)
053a866 fix: remediate 2026-W37 Trivy HIGH/CRITICAL CVEs in runtime images and deps (kubefleet-dev/kubefleet#887)
fcae85a interface: [FEP-0001] prevent unsetting ClusterClaim selector terms (kubefleet-dev/kubefleet#812)
a746c1d feat: [FEP-0001] add accessor interface for placement policy and related APIs (kubefleet-dev/kubefleet#827)
6e727a7 chore: bump distroless/base from
2d7d29btod199d20in /docker (kubefleet-dev/kubefleet#878)60dea36 feat: tweak the Trivy pipeline so that issues can be re-used and superseded (kubefleet-dev/kubefleet#885)
43511e7 chore: bump step-security/harden-runner from 2.21.0 to 2.21.1 (kubefleet-dev/kubefleet#877)
7d1a495 chore: bump oss/go/microsoft/golang from 1.26.6-1 to 1.26.8-1 in /docker (kubefleet-dev/kubefleet#879)
Dropped test changes from https://github.com/kubefleet-dev/kubefleet/tree/main/test/apis/kubefleet.dev/placement/v1alpha1
Kept the docker file changes for the openSSL fix
Fixes #
I have:
make reviewableto ensure this PR is ready for review.How has this code been tested
Special notes for your reviewer