Merge pull request #322 from fluxcd/release-v0.20.1

Release v0.20.1

Author: darkowlzz

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.20.1
+
+**Release date:** 2022-03-01
+
+This prerelease comes with improvements to the libgit2 OpenSSL build dependency,
+which fixes some issues related to git server connection leaks.
+
+In addition, `github.com/prometheus/client_golang` was updated to `v1.11.1`
+to please static analysers and fix warnings for CVE-2022-21698.
+
+Improvements:
+* Upgrade libgit2 and fix static builds
+  [#311](https://github.com/fluxcd/image-automation-controller/pull/311)
+* Add support for fuzzing tests using oss-fuzz-build.
+  [#314](https://github.com/fluxcd/image-automation-controller/pull/314)
+* Add support for multiple fuzz sanitizers
+  [#317](https://github.com/fluxcd/image-automation-controller/pull/317)
+* Update dependencies (fix CVE-2022-21698)
+  [#319](https://github.com/fluxcd/image-automation-controller/pull/319)
+
 ## 0.20.0
 
 **Release date:** 2022-02-01

config/manager/kustomization.yaml

@@ -5,4 +5,4 @@ resources:
 images:
 - name: fluxcd/image-automation-controller
   newName: fluxcd/image-automation-controller
-  newTag: v0.20.0
+  newTag: v0.20.1

go.mod

@@ -8,7 +8,7 @@ require (
 	github.com/Masterminds/sprig/v3 v3.2.2
 	github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7
 	github.com/cyphar/filepath-securejoin v0.2.2
-	github.com/fluxcd/image-automation-controller/api v0.20.0
+	github.com/fluxcd/image-automation-controller/api v0.20.1
 	// If you bump this, change REFLECTOR_VER in the Makefile to match
 	github.com/fluxcd/image-reflector-controller/api v0.16.0
 	github.com/fluxcd/pkg/apis/acl v0.0.3

tests/fuzz/oss_fuzz_build.sh

@@ -70,6 +70,16 @@ REFLECTOR_VER=v0.16.0
 mkdir -p testdata/crds
 cp ../../config/crd/bases/*.yaml testdata/crds/
 
+# Use main go.mod in order to conserve the same version across all dependencies.
+cp ../../go.mod .
+cp ../../go.sum .
+
+sed -i 's;module .*;module github.com/fluxcd/image-automation-controller/tests/fuzz;g' go.mod
+sed -i 's;api => ./api;api => ../../api;g' go.mod
+echo "replace github.com/fluxcd/image-automation-controller => ../../" >> go.mod
+
+go mod download
+
 if [ -d "../../controllers/testdata/crds" ]; then
     cp ../../controllers/testdata/crds/*.yaml testdata/crds
 # Fetch the CRDs if not present since we need them when running fuzz tests on CI.