build(deps): upgrade git to latest version

taskcluster · Jan 18, 2023 · 8d69a8e · 8d69a8e
1 parent a298dd5
commit 8d69a8e
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 5 deletions.
diff --git a/changelog/GiqjO4i_Q-aVD-EcTkIeUA.md b/changelog/GiqjO4i_Q-aVD-EcTkIeUA.md
@@ -0,0 +1,6 @@
+audience: general
+level: patch
+---
+Upgrade `git` to latest version to address the security vulnerabilities affecting versions 2.39 and older.
+
+[Announcement on GitHub](https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/)
diff --git a/taskcluster/ci/generic-worker/kind.yml b/taskcluster/ci/generic-worker/kind.yml
@@ -24,7 +24,7 @@ tasks:
           directory: '{go_version}'
           format: zip
         - content:
-            url: 'https://github.com/git-for-windows/git/releases/download/v2.14.1.windows.1/MinGit-2.14.1-64-bit.zip'
+            url: 'https://github.com/git-for-windows/git/releases/download/v2.39.1.windows.1/MinGit-2.39.1-64-bit.zip'
           directory: 'git'
           format: zip
     run:

diff --git a/workers/generic-worker/gw-decision-task/tasks.yml b/workers/generic-worker/gw-decision-task/tasks.yml
@@ -301,12 +301,12 @@ Mounts:
     content:
       windows:
         '386':
-          url: https://github.com/git-for-windows/git/releases/download/v2.39.0.windows.1/MinGit-2.39.0-32-bit.zip
-          sha256: ad20467cf6a4c215b2c71f9bee192fb8ea1696fa3dda8e35e89544cdabdc1c7a
+          url: https://github.com/git-for-windows/git/releases/download/v2.39.1.windows.1/MinGit-2.39.1-32-bit.zip
+          sha256: e36dc71d97359f584d25efbdabb4122fb71514bcba5a99df1b82a83cee9472e3
           format: zip
         amd64:
-          url: https://github.com/git-for-windows/git/releases/download/v2.39.0.windows.1/MinGit-2.39.0-64-bit.zip
-          sha256: ae6863d7b7641ecf73f61edadbc7d1ff8259d08eccb4b9f006bb443d90910c25
+          url: https://github.com/git-for-windows/git/releases/download/v2.39.1.windows.1/MinGit-2.39.1-64-bit.zip
+          sha256: 000649846ec6e28e8f76d4a0d02f02b3dd1ba19914385f7dead1c5cde25b3bad
           format: zip
   jq1.6:
     file: bin/jq${EXTENSION}