Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-1.12] Bump to Go 1.20.7 #6318

Merged
merged 1 commit into from Sep 1, 2023

Conversation

maelvls
Copy link
Member

@maelvls maelvls commented Sep 1, 2023

Go 1.20.6, which we used to build the cert-manager 1.20.3 binaries, are affected by a security bug in crypto/tls.

You can learn more at golang/go#61460.

Use Go 1.20.7 to fix a security issue in Go's `crypto/tls` library.

xref: #6317

Signed-off-by: Maël Valais <mael@vls.dev>
@jetstack-bot jetstack-bot added release-note Denotes a PR that will be considered when it comes time to generate release notes. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. needs-kind Indicates a PR lacks a `kind/foo` label and requires one. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Sep 1, 2023
@maelvls maelvls added the kind/bug Categorizes issue or PR as related to a bug. label Sep 1, 2023
@jetstack-bot jetstack-bot removed the needs-kind Indicates a PR lacks a `kind/foo` label and requires one. label Sep 1, 2023
Copy link
Member

@jakexks jakexks left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@jetstack-bot jetstack-bot added the lgtm Indicates that a PR is ready to be merged. label Sep 1, 2023
@jetstack-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jakexks

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jetstack-bot jetstack-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 1, 2023
@jetstack-bot jetstack-bot merged commit fe41951 into cert-manager:release-1.12 Sep 1, 2023
6 checks passed
nrdufour added a commit to nrdufour/home-ops that referenced this pull request Sep 3, 2023
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cert-manager](https://github.com/cert-manager/cert-manager) | patch | `v1.12.3` -> `v1.12.4` |

---

### Release Notes

<details>
<summary>cert-manager/cert-manager (cert-manager)</summary>

### [`v1.12.4`](https://github.com/cert-manager/cert-manager/releases/tag/v1.12.4)

[Compare Source](cert-manager/cert-manager@v1.12.3...v1.12.4)

v1.12.4 contains an important security fix that addresses [CVE-2023-29409](https://cve.report/CVE-2023-29409).

#### Changes since v1.12.3

-   Fixes an issue where cert-manager would incorrectly reject two IP addresses as being unequal when they should hav
    e compared equal. This would be most noticeable when using an IPv6 address which doesn't match how Go's `net.IP.Str
    ing()` function would have printed that address. ([#&#8203;6297](cert-manager/cert-manager#6297), [@&#8203;SgtCoDFish](https://github.com/SgtCoDFish))
-   Use Go 1.20.7 to fix a security issue in Go's `crypto/tls` library. ([#&#8203;6318](cert-manager/cert-manager#6318), [@&#8203;maelvls](https://github.com/maelvls))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yMy4yIiwidXBkYXRlZEluVmVyIjoiMzYuMjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Reviewed-on: https://git.home/nrdufour/home-ops/pulls/70
Co-authored-by: Renovate <renovate@ptinem.io>
Co-committed-by: Renovate <renovate@ptinem.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. kind/bug Categorizes issue or PR as related to a bug. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants