coredns/1.11.3-r7: cve remediation

[octo-sts]

coredns/1.11.3-r7: fix GHSA-29wx-vh33-7x7r

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/coredns.advisories.yaml

[octo-sts]

Gen AI suggestions to solve the build error:

Based on the error log, the main issue appears to be a Go version mismatch when building the kuma-coredns subpackage. Here are the steps to fix this:

1. Update the Go version requirement in the melange YAML file to match what's needed (1.23.2). Add or modify the following in your coredns.yaml:

environment:
  GOTOOLCHAIN: "local"
  GO_VERSION: "1.23.2"

packages:
  go:
    version: "1.23.2"

2. Remove the kuma-coredns subpackage if it's not required, or update its configuration. In your coredns.yaml, either:

   • Remove the kuma-coredns pipeline section if not needed
   • Or update its configuration to work with Go 1.23.2

3. Clean up the build cache:

rm -rf .melangecache

4. Make sure your melange YAML has the correct build dependencies:

environment:
  GOMODCACHE: "${{targets.destdir}}/go/pkg/mod"
  
dependencies:
  build:
    - go-1.23
    - git
    - make
    - build-base

5. Try rebuilding with:

make MELANGE_EXTRA_OPTS="--create-build-log --cache-dir=.melangecache" REPO="./packages" package/coredns -j1

If the issue persists, you may need to:

• Check if there are any vendored dependencies that need updating
• Verify the go.mod and go.sum files are correct
• Ensure all required build dependencies are available in the Wolfi repositories