Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update go version to 1.20.12 #3548

Merged
merged 1 commit into from
May 7, 2024
Merged

update go version to 1.20.12 #3548

merged 1 commit into from
May 7, 2024

Conversation

ArrisLee
Copy link
Collaborator

@ArrisLee ArrisLee commented Apr 29, 2024

Which issue this PR addresses:
https://issues.redhat.com/browse/ARO-6716

Fixes
What this PR does / why we need it:
This fixes some CVEs in the standard library which govulncheck notes:
https://pkg.go.dev/vuln/GO-2023-2382
https://pkg.go.dev/vuln/GO-2023-2186
among others patched in go-toolset

Test plan for issue:
local go unit test with /pkg/containerinstall/install_test.go and E2E

Is there any documentation that needs to be updated for this PR?
N/A

How do you know this will function as expected in production?
should be fine as long as E2E passes

@ArrisLee
Copy link
Collaborator Author

/azp run e2e, ci

Copy link

Azure Pipelines successfully started running 2 pipeline(s).

@ArrisLee ArrisLee changed the title bump go version to 1.20.12 update go version to 1.20.12 Apr 29, 2024
@ArrisLee
Copy link
Collaborator Author

/azp run e2e

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@ArrisLee
Copy link
Collaborator Author

/azp run e2e

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@ArrisLee
Copy link
Collaborator Author

/azp run e2e

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@ArrisLee
Copy link
Collaborator Author

/azp run e2e

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Copy link
Collaborator

@anshulvermapatel anshulvermapatel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you wanna change the version in the Dockerfiles as well?

FROM ${REGISTRY}/ubi8/go-toolset:1.20.10 AS builder

@yjst2012
Copy link
Contributor

yjst2012 commented May 1, 2024

Do you wanna change the version in the Dockerfiles as well?

FROM ${REGISTRY}/ubi8/go-toolset:1.20.10 AS builder

Good catch, the dockerfile changes are in another PR, as the go upgrading effort is separated into different tasks, feel free to take a look at it, thanks.

Copy link
Contributor

@yjst2012 yjst2012 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, guess just waiting for the PR to fix the broken E2E

@anshulvermapatel
Copy link
Collaborator

/azp run e2e

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@yjst2012
Copy link
Contributor

yjst2012 commented May 7, 2024

Wow, finally got E2E passed, merging now.

@yjst2012 yjst2012 merged commit 2015715 into master May 7, 2024
19 checks passed
@yjst2012 yjst2012 deleted the arrislee/ARO-6716 branch May 7, 2024 06:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
go Pull requests that update Go code ready-for-review skippy pull requests raised by member of Team Skippy
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants