Merge pull request #9130 from wolfi-dev/wolfictl-ea6c4604-bf21-4a2f-8…

…0de-bc4e6ad2a623

keda/2.12.1 package update

keda.yaml

@@ -1,8 +1,8 @@
 package:
   name: keda
   # See https://github.com/kedacore/keda/blob/main/SECURITY.md#supported-versions for upstream-supported versions
-  version: 2.12.0
-  epoch: 6
+  version: 2.12.1
+  epoch: 0
   description: KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
   copyright:
     - license: Apache-2.0
@@ -27,28 +27,9 @@ pipeline:
     with:
       repository: https://github.com/kedacore/keda
       tag: v${{package.version}}
-      expected-commit: 9527a7f1f2797aa5662b2b45b1d26acf22a0cd09
+      expected-commit: dc76ca70f19c22e8f0c806f84d95256d771f3dc9
 
   - runs: |
-      # CVE-2023-39325
-      go get golang.org/x/[email protected]
-
-      # Remediate GHSA-m425-mq94-257g
-      go mod edit -droprequire=google.golang.org/grpc
-      go get google.golang.org/[email protected]
-
-      # google.golang.org/[email protected] changes the required sigs.k8s.io/custom-metrics-apiserver version
-      go mod edit -replace=sigs.k8s.io/custom-metrics-apiserver=sigs.k8s.io/[email protected]
-
-      # CVE-2023-45142
-      go get go.opentelemetry.io/contrib/instrumentation/net/http/[email protected]
-      go get go.opentelemetry.io/otel/exporters/otlp/[email protected]
-      go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected]
-      go get go.opentelemetry.io/otel/exporters/otlp/otlpmetric/[email protected]
-      go get go.opentelemetry.io/otel/[email protected]
-      go mod edit -droprequire=go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
-      go get go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected]
-
       # GHSA-2c7c-3mj9-8fqh
       go get github.com/go-jose/go-jose/[email protected]