[release-1.31] Bump k3s

[brandond]

Proposed Changes

Bump K3s/wharfie/kine

Types of Changes

version bump / bugfix

Verification

Testing

Linked Issues

• [Release-1.31] - S3 snapshots missing from etcdsnapshotfile list / rke2-etcd-snapshots configmap when multiple nodes save at the same time #7027
• [Release-1.31] - Bump wharfie  #7005
• [Release-1.31] - Replace klipper-lb with busybox #7037

User-Facing Change

Further Comments

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 0% with 4 lines in your changes missing coverage. Please review.

Project coverage is 25.09%. Comparing base (00aded3) to head (a985d47).

Files with missing lines	Patch %	Lines
pkg/rke2/rke2_linux.go	0.00%	4 Missing ⚠️

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.31    #7032      +/-   ##
================================================
- Coverage         25.11%   25.09%   -0.02%     
================================================
  Files                33       33              
  Lines              2839     2841       +2     
================================================
  Hits                713      713              
- Misses             2079     2081       +2     
  Partials             47       47              

Flag	Coverage Δ
inttests	9.53% <0.00%> (-0.01%)	⬇️
unittests	17.74% <0.00%> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[cwayne18]

/trivy

[github-actions]

bin/containerd (gobinary)
=========================
Total: 0 (HIGH: 0, CRITICAL: 0)


Suppressed Vulnerabilities (Total: 1)
=====================================
┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬──────────────┬─────────────────────────────────────┬─────────┐
│                           Library                            │ Vulnerability  │ Severity │    Status    │              Statement              │ Source  │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼──────────────┼─────────────────────────────────────┼─────────┤
│ go.opentelemetry.io/contrib/instrumentation/google.golang.o- │ CVE-2023-47108 │ HIGH     │ not_affected │ vulnerable_code_not_in_execute_path │ OpenVEX │
│ rg/grpc/otelgrpc                                             │                │          │              │                                     │         │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴──────────────┴─────────────────────────────────────┴─────────┘

bin/kubectl (gobinary)
======================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬────────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version  │                           Title                           │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼────────────────┼───────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2024-34156 │ HIGH     │ fixed  │ 1.22.6            │ 1.22.7, 1.23.1 │ encoding/gob: golang: Calling Decoder.Decode on a message │
│         │                │          │        │                   │                │ which contains deeply nested structures...                │
│         │                │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2024-34156                │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴────────────────┴───────────────────────────────────────────────────────────┘

bin/kubelet (gobinary)
======================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬────────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version  │                           Title                           │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼────────────────┼───────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2024-34156 │ HIGH     │ fixed  │ 1.22.6            │ 1.22.7, 1.23.1 │ encoding/gob: golang: Calling Decoder.Decode on a message │
│         │                │          │        │                   │                │ which contains deeply nested structures...                │
│         │                │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2024-34156                │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴────────────────┴───────────────────────────────────────────────────────────┘

Suppressed Vulnerabilities (Total: 1)
=====================================
┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬──────────────┬─────────────────────────────────────┬─────────┐
│                           Library                            │ Vulnerability  │ Severity │    Status    │              Statement              │ Source  │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼──────────────┼─────────────────────────────────────┼─────────┤
│ go.opentelemetry.io/contrib/instrumentation/github.com/emic- │ CVE-2023-45142 │ HIGH     │ not_affected │ vulnerable_code_not_in_execute_path │ OpenVEX │
│ klei/go-restful/otelrestful                                  │                │          │              │                                     │         │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴──────────────┴─────────────────────────────────────┴─────────┘