Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security: update go version to 1.20.4 #17240

Merged
merged 5 commits into from
May 8, 2023
Merged

security: update go version to 1.20.4 #17240

merged 5 commits into from
May 8, 2023

Conversation

jmurret
Copy link
Contributor

@jmurret jmurret commented May 8, 2023

Changes proposed in this PR:

Resolves CVES: GHSA-fp86-2355-v99r, GHSA-v4m2-x4rp-hv22, GHSA-8v5j-pwr7-w5f8, GHSA-9f7g-gqwh-jpf5, plus additional CVEs resolved with Go 1.19.9.
Resolves dependabot PRs hashicorp/consul-k8s#2096, hashicorp/consul-k8s#1987, hashicorp/consul-k8s#1986

PR Checklist

  • external facing docs updated
  • appropriate backport labels added

@jmurret jmurret added backport/1.13 backport/1.15 This release series is no longer active on CE. Use backport/ent/1.15. labels May 8, 2023
@github-actions github-actions bot added theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases labels May 8, 2023
@jmurret jmurret marked this pull request as ready for review May 8, 2023 16:12
@jmurret jmurret requested a review from a team May 8, 2023 16:12
@jmurret jmurret requested a review from a team as a code owner May 8, 2023 16:12
@jmurret jmurret requested review from marianoasselborn, claire-labry and DanStough and removed request for a team May 8, 2023 16:12
@jmurret jmurret changed the title update go version to 1.20.3 security: update go version to 1.20.3 May 8, 2023
Copy link
Member

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go 1.20.4 is available; I think we should make sure we use the latest.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IICR, the underscore convention is for Enterprise only changes

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ooh! thank you!

@jmurret
Copy link
Contributor Author

jmurret commented May 8, 2023

Go 1.20.4 is available; I think we should make sure we use the latest.

Cool, yes. the task is just outdated. I'll update this.

@jmurret jmurret changed the title security: update go version to 1.20.3 security: update go version to 1.20.4 May 8, 2023
@jmurret jmurret requested a review from DanStough May 8, 2023 17:04
Copy link
Member

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

Copy link
Member

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
…#17245)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
jmurret added a commit that referenced this pull request May 8, 2023
…#17244)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
jmurret added a commit that referenced this pull request May 9, 2023
…#17243)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

* upgrading to 1.20

* [OSS] security: update go to 1.20.1 (#16263)

* security: update go to 1.20.1

* fixing auto_config_endpoint_test that was merged incorrectly

* go mod tidy

* fixing auto_config_endpoint_test that was merged incorrectly

* updating linter to 1.51.1

* go mod tidy on api

* go mod tidy

* removes ioutil usage everywhere which was deprecated in go1.16 (#15297)

* update go version to 1.18 for api and sdk, go mod tidy
* removes ioutil usage everywhere which was deprecated in go1.16 in favour of io and os packages. Also introduces a lint rule which forbids use of ioutil going forward.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>

* go mod tidy

* getting rd of net in imports

* get rid of use of math.rand

* get rid of use of math/rand in audo_config_endpoint_test.go

* update leader test

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
Co-authored-by: Dan Stough <dan.stough@hashicorp.com>
Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.15 This release series is no longer active on CE. Use backport/ent/1.15. theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants