Skip to content

Conversation

@M4tteoP
Copy link
Member

@M4tteoP M4tteoP commented Nov 24, 2025

Fixes CVE-2025-58187. Commit has been cherry-picked from the upstream repo.

SuperQ and others added 2 commits November 24, 2025 15:18
* Update minimum supported Go to 1.24.0.
* Update Go build to 1.25.x.
* Update PostgreSQL testing versions.

Signed-off-by: SuperQ <superq@gmail.com>
@@ -1,9 +1,7 @@
module github.com/prometheus-community/postgres_exporter

go 1.24.0

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doesn't this need to be updated?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The go version in go.mod is used only as minimal go version of the repo, the go version used to actually build the image is the one in .circleci/config.yml, which is from this image cimg/go:1.25

Copy link
Member Author

@M4tteoP M4tteoP Nov 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still, we could update it and make the min version stricter for us. I wanted to stick with upstream to simplify future cherry-pick

@M4tteoP M4tteoP merged commit b505f4d into release-v0.18.1 Nov 24, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants