update dependencies, some fixes a few CVEs

[cpanato]

• update dependencies, some fixes a few CVEs

for etcd, they have fixes in the release-3.5 branch but not released yet, so pinning for the head of the release-3.5 branch

Checklist

• I have updated the CHANGELOG.
• I have updated documentation accordingly (including the feature implementation matrix).

[roger2hk]

According to etcd-io/etcd#16733, v3.5.10 will be officially released in the coming few days to address the CVEs (e.g. GHSA-m425-mq94-257g).

[cpanato]

According to etcd-io/etcd#16733, v3.5.10 will be officially released in the coming few days to address the CVEs (e.g. GHSA-m425-mq94-257g).

I was not aware of that issue, thanks, that is good, we can test this pr in meantime and when they release we just updated here, wdyt?

[roger2hk]

/gcbrun

[roger2hk]

According to etcd-io/etcd#16733, v3.5.10 will be officially released in the coming few days to address the CVEs (e.g. GHSA-m425-mq94-257g).

I was not aware of that issue, thanks, that is good, we can test this pr in meantime and when they release we just updated here, wdyt?

SGTM to run the tests in advance, thanks. I actually have a similar draft PR to bump the etcd dependencies two months ago.

[cpanato]

According to etcd-io/etcd#16733, v3.5.10 will be officially released in the coming few days to address the CVEs (e.g. GHSA-m425-mq94-257g).

I was not aware of that issue, thanks, that is good, we can test this pr in meantime and when they release we just updated here, wdyt?

SGTM to run the tests in advance, thanks. I actually have a similar draft PR to bump the etcd dependencies two months ago.

should I close this one, then?

[roger2hk]

According to etcd-io/etcd#16733, v3.5.10 will be officially released in the coming few days to address the CVEs (e.g. GHSA-m425-mq94-257g).

I was not aware of that issue, thanks, that is good, we can test this pr in meantime and when they release we just updated here, wdyt?

SGTM to run the tests in advance, thanks. I actually have a similar draft PR to bump the etcd dependencies two months ago.

should I close this one, then?

We can make use of this PR to confirm all tests will pass before closing it.

[cpanato]

looks all green :)

[cpanato]

@roger2hk updated the branch to get the 3.5.10 release for etcd

[roger2hk]

/gcbrun

[roger2hk]

/gcbrun

[roger2hk]

@cpanato PR merged. Thank you very much for your contribution.

[cpanato]

@roger2hk any plans for a new release?

[roger2hk]

@roger2hk any plans for a new release?

I believe we will have a v1.5.3 release this week.

[roger2hk]

FYI. v1.5.3 is released.

[cpanato]

@roger2hk you are awesome thank you!