Add release 2.8.5

CHANGELOG.md

@@ -1,3 +1,10 @@
+## Release 2.8.5
+
+This release has upgraded dependencies based on CVE recommendations.
+
+* Build with Go version 1.21.9
+* A dependency has been updated
+
 ## Release 2.8.4
 
 The alpine base image used by `weave-kube` and `weave-npc` was upgraded to version 3.19.1 in the previous release. In this version, the default iptables backend is nftables, and the legacy backend is not included. Our scripts and programs assume legacy as the default backend, and change to nft if autodetected, or if we ask for it. So, the build Dockerfile (reweave/build/Dockerfile) was changed to also install the Alpine `iptables-legacy` package , and change the `iptables-{save,restore}` symbolic links to point to the legacy backend by default.

reweave/CHANGELOG.md

@@ -2,7 +2,12 @@
 
 All changes made to the weave net codebase during the reweave effort will be documented in this file.
 
-## 2.8.5-beta1
+## 2.8.5
+
+* Changed version in `reweave/Makefile` to 2.8.5
+* Modified reweave and main CHANGELOG.md
+
+## 2.8.5-beta1 (ac180cfc)
 
 ### Changed
 

reweave/Makefile

@@ -1,4 +1,4 @@
-IMAGE_VERSION ?= 2.8.5-beta1
+IMAGE_VERSION ?= 2.8.5
 REGISTRY_USER ?= rajchaudhuri
 
 ALPINE_BASEIMAGE ?= alpine:3.19.1

reweave/build/Dockerfile

@@ -26,8 +26,7 @@ RUN <<EOCROSSCOMPILERS
 set -e
 echo 'Acquire::Retries "6";' > /etc/apt/apt.conf.d/80-retries
 for platform in ${DEB_CROSSPLATFORMS}; do dpkg --add-architecture $platform; done 
-apt-get update --error-on=any
-apt-get upgrade -y
+apt-get update
 apt-get install -y build-essential
 for platform in ${DEB_CROSSPLATFORMS}; do apt-get install -y crossbuild-essential-${platform}; done 
 apt-get clean

reweave/scans/report.md

@@ -1,9 +1,9 @@
 # Vulnerability Report
 
 ```
-Report date: 2024-04-04
+Report date: 2024-04-06
 Unique vulnerability count: 17
-Images version: 2.8.5-beta1
+Images version: 2.8.5
 ```
 
 ## Scanner Details