Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[0.11.x] Bump deps and go version for CVE fixes #1411

Merged
merged 3 commits into from
Nov 23, 2023
Merged

[0.11.x] Bump deps and go version for CVE fixes #1411

merged 3 commits into from
Nov 23, 2023

Commits on Nov 23, 2023

  1. setup go toolchain for unit test workflow 

    i think we were relying on the go toolchain available inside the runner
image, which could be out of date. Instead we should use the setup-go
action which should have the latest version of the toolchain

Signed-off-by: Bohan Chen <bohanc@vmware.com>
    @chenbh
    chenbh committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    6ce0bc7 View commit details
    Browse the repository at this point in the history

  2. add setup-go action to the pack-build action 

    otherwise it'll use the system toolchain to run report.go, which will
fail when it encounters the new `toolchain` directive in the root go.mod

Signed-off-by: Bohan Chen <bohanc@vmware.com>
    @chenbh
    chenbh committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    02070cd View commit details
    Browse the repository at this point in the history

  3. bump deps and go version due to cves 

    Signed-off-by: Bohan Chen <bohanc@vmware.com>
    @chenbh
    chenbh committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    8bf16f2 View commit details
    Browse the repository at this point in the history