Merge pull request #38111 from wolfi-dev/cve-kserve-modelmesh-0cddae6…

…55cfc1161a944783ff221d658 kserve-modelmesh/0.12.0-r5: cve remediation
wolfi-dev · Jan 9, 2025 · 5fa107e · 5fa107e
2 parents 62b0fd8 + a5377f2
commit 5fa107e
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 7 deletions.
diff --git a/kserve-modelmesh.yaml b/kserve-modelmesh.yaml
@@ -1,7 +1,7 @@
 package:
   name: kserve-modelmesh
   version: 0.12.0
-  epoch: 5
+  epoch: 6
   description: The ModelMesh framework is a mature, general-purpose model serving management/routing layer designed for high-scale, high-density and frequently-changing model use cases.
   dependencies:
     runtime:

diff --git a/kserve-modelmesh/pombump-deps.yaml b/kserve-modelmesh/pombump-deps.yaml
@@ -1,7 +1,10 @@
 patches:
-    - groupId: com.google.protobuf
-      artifactId: protobuf-java
-      version: 3.25.5
-    - groupId: commons-io
-      artifactId: commons-io
-      version: 2.14.0
+  - groupId: com.google.protobuf
+    artifactId: protobuf-java
+    version: 3.25.5
+  - groupId: commons-io
+    artifactId: commons-io
+    version: 2.14.0
+  - groupId: ch.qos.logback
+    artifactId: logback-core
+    version: 1.5.13