chore(deps): update dependency coredns/coredns to v1.14.1 - autoclosed #3423

Closed
renovate-bot wants to merge 1 commits from renovate/coredns-coredns-1.x into main
Collaborator

This PR contains the following updates:

Package Update Change
coredns/coredns minor v1.13.2v1.14.1

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

coredns/coredns (coredns/coredns)

v1.14.1

Compare Source

This release primarily addresses security vulnerabilities affecting Go versions prior to
Go 1.25.6 and Go 1.24.12 (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
CVE-2025-68119). It also includes performance improvements to the proxy plugin via
multiplexed connections, along with various documentation updates.

Brought to You By

Alex Massy
Shiv Tyagi
Ville Vesilehto
Yong Tang

Noteworthy Changes

  • plugin/proxy: Use mutex-based connection pool (#​7790)

v1.14.0

Compare Source

This release focuses on security hardening and operational reliability. Core updates
introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates
improve error consolidation (show_first), reduce misleading SOA warnings, add
Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix
issues in azure and sign. This release also includes additional security fixes;
see the security advisory for details.

Brought to You By

cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang

Noteworthy Changes

  • core: Fix gosec G115 integer overflow warnings (#​7799)
  • core: Add regex length limit (#​7802)
  • plugin/azure: Fix slice init length (#​6901)
  • plugin/errors: Add optional show_first flag to consolidate directive (#​7703)
  • plugin/file: Fix for misleading SOA parser warnings (#​7774)
  • plugin/kubernetes: Rate limits to api server (#​7771)
  • plugin/metrics: Implement plugin chain tracking (#​7791)
  • plugin/sign: Report parser err before missing SOA (#​7775)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [coredns/coredns](https://github.com/coredns/coredns) | minor | `v1.13.2` → `v1.14.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>coredns/coredns (coredns/coredns)</summary> ### [`v1.14.1`](https://github.com/coredns/coredns/releases/tag/v1.14.1) [Compare Source](https://github.com/coredns/coredns/compare/v1.14.0...v1.14.1) This release primarily addresses security vulnerabilities affecting Go versions prior to Go 1.25.6 and Go 1.24.12 (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731, CVE-2025-68119). It also includes performance improvements to the proxy plugin via multiplexed connections, along with various documentation updates. #### Brought to You By Alex Massy Shiv Tyagi Ville Vesilehto Yong Tang #### Noteworthy Changes - plugin/proxy: Use mutex-based connection pool ([#&#8203;7790](https://github.com/coredns/coredns/pull/7790)) ### [`v1.14.0`](https://github.com/coredns/coredns/releases/tag/v1.14.0) [Compare Source](https://github.com/coredns/coredns/compare/v1.13.2...v1.14.0) This release focuses on security hardening and operational reliability. Core updates introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates improve error consolidation (`show_first`), reduce misleading SOA warnings, add Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix issues in azure and sign. This release also includes additional security fixes; see the security advisory for details. #### Brought to You By cangming pasteley Raisa Kabir Ross Golder rusttech Syed Azeez Ville Vesilehto Yong Tang #### Noteworthy Changes - core: Fix gosec G115 integer overflow warnings ([#&#8203;7799](https://github.com/coredns/coredns/pull/7799)) - core: Add regex length limit ([#&#8203;7802](https://github.com/coredns/coredns/pull/7802)) - plugin/azure: Fix slice init length ([#&#8203;6901](https://github.com/coredns/coredns/pull/6901)) - plugin/errors: Add optional `show_first` flag to consolidate directive ([#&#8203;7703](https://github.com/coredns/coredns/pull/7703)) - plugin/file: Fix for misleading SOA parser warnings ([#&#8203;7774](https://github.com/coredns/coredns/pull/7774)) - plugin/kubernetes: Rate limits to api server ([#&#8203;7771](https://github.com/coredns/coredns/pull/7771)) - plugin/metrics: Implement plugin chain tracking ([#&#8203;7791](https://github.com/coredns/coredns/pull/7791)) - plugin/sign: Report parser err before missing SOA ([#&#8203;7775](https://github.com/coredns/coredns/pull/7775)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot added 1 commit 2026-01-23 21:04:01 +00:00
chore(deps): update dependency coredns/coredns to v1.14.1
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 13s
3f0ceb3842
renovate-bot force-pushed renovate/coredns-coredns-1.x from 3f0ceb3842 to 9a56a6a0c5 2026-01-23 22:15:23 +00:00 Compare
renovate-bot force-pushed renovate/coredns-coredns-1.x from 9a56a6a0c5 to dc7e983ac4 2026-01-23 22:49:06 +00:00 Compare
renovate-bot force-pushed renovate/coredns-coredns-1.x from dc7e983ac4 to 92372be596 2026-01-23 23:04:16 +00:00 Compare
renovate-bot changed title from chore(deps): update dependency coredns/coredns to v1.14.1 to chore(deps): update dependency coredns/coredns to v1.14.1 - autoclosed 2026-01-23 23:11:31 +00:00
renovate-bot closed this pull request 2026-01-23 23:11:32 +00:00
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 20s
render-manifests-automerge / render-manifests-automerge (pull_request) Has been skipped
render-manifests-merge / render-manifests-merge (pull_request) Has been skipped

Pull request closed

Sign in to join this conversation.