From 3316b19810e1b84bee372a8f285a59dd506381ef Mon Sep 17 00:00:00 2001 From: Ben Manuel Date: Thu, 29 Jun 2023 15:34:00 -0500 Subject: [PATCH] Update to golang 1.19.10 This addresses CVE-2023-29402, CVE-2023-29403, CVE-2023-29404, CVE-2023-29405 which were patched in 1.19.10. Signed-off-by: Ben Manuel (cherry picked from commit 36dd5b79ca81c7d945fb701d8eb958c0e212e24c) Signed-off-by: Sebastiaan van Stijn --- .github/workflows/ci.yml | 2 +- Dockerfile | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 337f1e812af..8ad613d8136 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,7 +25,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v2 with: - go-version: 1.19.9 + go-version: 1.19.10 - name: Dependencies run: | diff --git a/Dockerfile b/Dockerfile index 42b87c064cb..b655a06279f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ # syntax=docker/dockerfile:1 -ARG GO_VERSION=1.19.9 -ARG ALPINE_VERSION=3.16 +ARG GO_VERSION=1.19.10 +ARG ALPINE_VERSION=3.18 ARG XX_VERSION=1.2.1 FROM --platform=$BUILDPLATFORM tonistiigi/xx:${XX_VERSION} AS xx